CVE-2008-2397

Published: May 21, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in search-results.dot in dotCMS 1.x allows remote attackers to inject arbitrary web script or HTML via the search_query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected (13)

Products: Dotcms: Dotcms

Dotcms

1 product

Dotcms

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Dotcms Dotcms	Version 1.0
Dotcms Dotcms	Version 1.2.0
Dotcms Dotcms	Version 1.5.0
Dotcms Dotcms	Version 1.5.1.1
Dotcms Dotcms	Version 1.5.1
Dotcms Dotcms	Version 1.6.0.1
Dotcms Dotcms	Version 1.6.0.2
Dotcms Dotcms	Version 1.6.0.3
Dotcms Dotcms	Version 1.6.0.4
Dotcms Dotcms	Version 1.6
Dotcms Dotcms	Version 1.6 rc1
Dotcms Dotcms	Version 1.6 rc2
Dotcms Dotcms	Version 1.6 rc3