Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2020-17542 - Vulnerability Database

Dot CMS

Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2020-17542

Medium

Reference: CVE-2020-17542

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-17542

Title: Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

Cross Site Scripting (XSS) in dotCMS v5.1.5 allows remote attackers to execute arbitrary code by injecting a malicious payload into the quotTask Detailquot comment window of the quot/dotAdmin//c/workflowquot component.