CVE-2020-35274
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk45th percentile - higher than 45% of all known CVEs
Summary
DotCMS Add Template with admin panel 20.11 is affected by stored Cross-Site Scripting (XSS) that allows an attacker to steal cookies and gain remote privileges. This compromises the security of the web application.
Risk Assessment
The organization risks account takeover of administrators, potentially leading to full CMS compromise and data breach.
Recommendation
Immediately update DotCMS to a patched version and implement input sanitization in the admin panel to prevent XSS attacks.
Original NVD description (English source)
DotCMS Add Template with admin panel 20.11 is affected by cross-site Scripting (XSS) to gain remote privileges. An attacker could compromise the security of a website or web application through a stored XSS attack and stealing cookies using XSS.