CVE-2018-5690

2018-01-1404:29:00

Google

osv.dev

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.8%

JSON

Cross-site scripting (XSS) vulnerability in admin/users.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the nb parameter (aka the page limit number).

CPENameOperatorVersion
dotcleareq2.6.4
dotcleareq2.7.2
dotcleareq2.4.3
dotcleareq2.11.0
dotcleareq2.7.1
dotcleareq2.8.1
dotcleareq2.10.2
dotcleareq2.9.0
dotcleareq2.10.3
dotcleareq2.7.0

Name	Operator	Version
dotclear	eq	2.6.4
dotclear	eq	2.7.2
dotclear	eq	2.4.3
dotclear	eq	2.11.0
dotclear	eq	2.7.1
dotclear	eq	2.8.1
dotclear	eq	2.10.2
dotclear	eq	2.9.0
dotclear	eq	2.10.3
dotclear	eq	2.7.0