DO
Product
Dotclear
by dotclear · last CVE Dec 19, 2025
32
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 8Low 1
Watch

Add Dotclear to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-7903
3.7
1%
Jan 4
Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link via the HTTP Host…
Affected: through 2.10.2
Showing 1