CVE-2013-3484

no score yetEPSS 1.9%

dotcms dotcms: no CVSS score yet. EPSS 1.9% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in dotCMS before 2.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) _loginUserName parameter to application/login/login.html, (2) my_account_login parameter to c/portal_public/login, or (3) email parameter to forgotPassword.

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2014-04-02
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

dotcms:dotcms

References

http://dotcms.com/security/SI-14
http://secunia.com/advisories/53265
https://github.com/dotCMS/dotCMS/issues/2949
http://dotcms.com/security/SI-14
http://secunia.com/advisories/53265

Check your stack JSON