medium6.1
CVE-2018-16980
dotCMS V5.0.1 has XSS in the /html/portlet/ext/contentlet/image_tools/index.jsp fieldName and inode parameters.
Impact
dotCMS V5.0.1 has XSS in the /html/portlet/ext/contentlet/image_tools/index.jsp fieldName and inode parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dotcms | Dotcms | Version 5.0.1 |