CVE-2018-5689

CVE-2018-5689

EPSS 0.9%

Cross-site scripting (XSS) vulnerability in admin/auth.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the malicious user's email.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://dev.dotclear.org/2.0/changeset/3b0b868d58b00a1b216e0dc13c461bb3550ed3da https://hg.dotclear.org/dotclear/rev/3b0b868d58b0