CVE-2016-9891

Cross-site scripting (XSS) vulnerability in admin/media.php and admin/media_item.php in Dotclear before 2.11 allows remote authenticated users to inject…

published December 29, 2016

CVSS
—
EPSS
1%
Percentile
61.0
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in admin/media.php and admin/media_item.php in Dotclear before 2.11 allows remote authenticated users to inject arbitrary web script or HTML via the upfiletitle or media_title parameter (aka the media title).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00960 · 61.0th percentile
Published
2016-12-29T18:00Z
EPSS history
Timeline
  • 29 DEC 18:00Z
    Cross-site scripting (XSS) vulnerability in admin/media.php and admin/media_item.php in Dotclear before 2.11 allows remote authenticated users to inject…
    cvelistv5