Security Advisory
CVE-2018-16358
5.4
MEDIUM
Vulnerability Description
A cross-site scripting (XSS) vulnerability in inc/core/class.dc.core.php in the media manager in Dotclear through 2.14.1 allows remote authenticated users to upload HTML content containing an XSS payload with the file extension .ahtml.
Published Date
September 2, 2018
Official Source
NIST NVD Advisory