Security Advisory
CVE-2018-16622
5.4
MEDIUM
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in /api/content/addOne in DoraCMS v2.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) discription or (2) comments field, related to users/userAddContent.
Published Date
September 6, 2018
Official Source
NIST NVD Advisory