Security Advisory

CVE-2018-5689

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-01-14 04:00:00
Last updated 2024-08-05 05:40:51
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in admin/auth.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the malicious user's email.