CVE-2018-16358

A cross-site scripting (XSS) vulnerability in inc/core/class.dc.core.php in the media manager in Dotclear through 2.14.1 allows remote authenticated users to…

published September 2, 2018

CVSS
—
EPSS
1%
Percentile
51.8
In the wild
Unconfirmed
What it is

A cross-site scripting (XSS) vulnerability in inc/core/class.dc.core.php in the media manager in Dotclear through 2.14.1 allows remote authenticated users to upload HTML content containing an XSS payload with the file extension .ahtml.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00680 · 51.8th percentile
Published
2018-09-02T22:00Z
EPSS history
Timeline
  • 02 SEP 22:00Z
    A cross-site scripting (XSS) vulnerability in inc/core/class.dc.core.php in the media manager in Dotclear through 2.14.1 allows remote authenticated users to…
    cvelistv5