medium6.1
CVE-2019-11846
/servlets/ajax_file_upload?fieldName=binary3 in dotCMS 5.1.1 allows XSS and HTML Injection.
Impact
/servlets/ajax_file_upload?fieldName=binary3 in dotCMS 5.1.1 allows XSS and HTML Injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dotcms | Dotcms | Version 5.1.1 |