CVE-2013-3484 | BDVDB-2026-60707 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in dotCMS before 2.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) _loginUserName parameter to application/login/login.html, (2) my_account_login parameter to c/portal_public/login, or (3) email parameter to forgotPassword.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/dotCMS/dotCMS/issues/2949
http://secunia.com/advisories/53265
http://dotcms.com/security/SI-14

Exploit#

No public exploit known

History#

Version 12014-04-02Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.