DO
Product
Dotclear
32
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 8Low 1
Watch
Add Dotclear to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-27626 | 6.1 | Mar 21 | A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in Dotclear version 2.29 Affected: 2.29 |
| CVE-2017-6446 | 6.1 | Mar 5 | XSS was discovered in Dotclear v2.11.2, affecting admin/blogs.php and admin/users.php with the sortby and order parameters Affected: 2.11.2 |
| CVE-2015-8831 | 6.1 | Feb 9 | Cross-site scripting (XSS) vulnerability in admin/comments.php in Dotclear before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via the author name in a… Affected: through 2.8.1 |
| CVE-2016-6523 | 6.1 | Dec 9 | Multiple cross-site scripting (XSS) vulnerabilities in the media manager in Dotclear before 2.10 allow remote attackers to inject arbitrary web script or HTML via the (1) q or (2)… Affected: through 2.9.1 |
| CVE-2018-16358 | 5.4 | Sep 2 | A cross-site scripting (XSS) vulnerability in inc/core/class.dc.core.php in the media manager in Dotclear through 2.14.1 allows remote authenticated users to upload HTML content… Affected: through 2.14.1 |
| CVE-2018-5690 | 5.4 | Jan 14 | Cross-site scripting (XSS) vulnerability in admin/users.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the nb parameter (aka… Affected: 2.12.1 |
| CVE-2018-5689 | 5.4 | Jan 14 | Cross-site scripting (XSS) vulnerability in admin/auth.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the malicious user's… Affected: 2.12.1 |
| CVE-2016-9891 | 5.4 | Dec 29 | Cross-site scripting (XSS) vulnerability in admin/media.php and admin/media_item.php in Dotclear before 2.11 allows remote authenticated users to inject arbitrary web script or… Affected: through 2.10.4 |
Showing 8