Doracms vulnerabilities

2 known vulnerabilities in Doracms from Html-js. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Doracms: Improper Neutralization of Input During Web Page Generation

  CVE-2024-28715Mar 19, 2024Html-jsEPSS 1.07%

  Cross Site Scripting vulnerability in DOraCMS v.2.18 and before allows a remote attacker to execute arbitrary code via the markdown0 function in the /app/public/apidoc/oas3/wrap-components/markdown.jsx endpoint.

• 9.8 Critical severity

  Doracms: Improper Restriction of Excessive Authentication Attempts

  CVE-2023-49443Dec 8, 2023Html-js

  DoraCMS v2.1.8 was discovered to re-use the same code for verification of valid usernames and passwords. This vulnerability allows attackers to gain access to the application via a bruteforce attack.