medium5.4
CVE-2018-19554
An issue was discovered in Dotcms through 5.0.3.
Impact
An issue was discovered in Dotcms through 5.0.3. Attackers may perform XSS attacks via the inode, identifier, or fieldName parameter in html/js/dotcms/dijit/image/image_tool.jsp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dotcms | Dotcms | through 5.0.3 |