CVE-2017-5876 in dotCMS
Summary
XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /news-events/events date parameter.
Reservation
02/02/2017
Disclosure
02/06/2017
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 96569 | dotCMS events cross site scripting | 79 | Not defined | Not defined | CVE-2017-5876 |