CVE-2018-16622
06.09.2018, 19:29
Multiple cross-site scripting (XSS) vulnerabilities in /api/content/addOne in DoraCMS v2.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) discription or (2) comments field, related to users/userAddContent.
| Vendor | Product | Version |
|---|---|---|
| html-js | doracms | 2.0.3 |
𝑥
= Vulnerable software versions