Non évaluée

A cross-site scripting (XSS) vulnerability in inc/core/class.dc.core.php in the media manager in Dotclear through 2.14.1 allows remote authenticated u...

CVE-2018-16358 Première détection SecPulse Sep 3, 2018

Description d'origine La description telle que publiée par la source (souvent en anglais).

A cross-site scripting (XSS) vulnerability in inc/core/class.dc.core.php in the media manager in Dotclear through 2.14.1 allows remote authenticated users to upload HTML content containing an XSS payload with the file extension .ahtml.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory hg.dotclear.org

Faits clés

Gravité: Non évaluée
Publication: Sep 3, 2018
Première détection SecPulse: Sep 3, 2018

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:49