Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2018-19554 - Vulnerability Database

Dot CMS

Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2018-19554

Medium

Reference: CVE-2018-19554

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2018-19554

Title: Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

An issue was discovered in Dotcms through 5.0.3. Attackers may perform XSS attacks via the inode identifier or fieldName parameter in html/js/dotcms/dijit/image/image_tool.jsp.