| Package | Affected versions | Patched versions |
|---|---|---|
| dotclear | ≤ 2.14.1 |
A cross-site scripting (XSS) vulnerability in inc/core/class.dc.core.php in the media manager in Dotclear through 2.14.1 allows remote authenticated users to upload HTML content containing an XSS payload with the file extension .ahtml.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free