CVE-2017-5875 in dotCMS
Summary
XSS was discovered in dotCMS 3.7.0, with an authenticated attack against the /myAccount addressID parameter.
Reservation
02/02/2017
Disclosure
02/06/2017
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 96568 | dotCMS myAccount cross site scripting | 79 | Not defined | Not defined | CVE-2017-5875 |