Dotclear vulnerabilities
We track 2 vulnerabilities in Dotclear products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 19, 2025.
2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score
Latest Dotclear vulnerabilities
- 8.8 High severity
Dotclear: Unrestricted Upload of File with Dangerous Type
Dotclear 2.25.3 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files with .phar extension through the blog post creation interface. Attackers can upload files containing PHP system commands that execu
- 8.8 High severity
Dotclear: Unrestricted Upload of File with Dangerous Type
Dotclear 2.29 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the media upload functionality. Attackers can exploit the file upload process by crafting a PHP shell with a command executio