CVE-2017-5875 in dotCMSinfo

Summary

XSS was discovered in dotCMS 3.7.0, with an authenticated attack against the /myAccount addressID parameter.

Reservation

02/02/2017

Disclosure

02/06/2017

Entries

VulDB provides additional information and datapoints for this CVE:

Do you want to use VulDB in your project?

Use the official API to access entries easily!