Dotclear: >> Dotclear >> 2.11 Security Vulnerabilities
A cross-site scripting (XSS) vulnerability in inc/core/class.dc.core.php in the media manager in Dotclear through 2.14.1 allows remote authenticated users to upload HTML content containing an XSS payload with the file extension .ahtml.
CVSS Score
5.4
EPSS Score
0.002
Published
2018-09-02