CVE-2018-16980

dotCMS V5.0.1 has XSS in the /html/portlet/ext/contentlet/image_tools/index.jsp fieldName and inode parameters.

• CWE-79

• https://github.com/dotCMS/core/issues/15274Exploit, Issue Tracking, Vendor Advisory
• https://github.com/dotCMS/core/issues/15274Exploit, Issue Tracking, Vendor Advisory

Published

Sep 12, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-16975An issue was discovered in Elefant CMS before 2.0.7. There i…
• CVE-2018-16976Gitolite before 3.6.9 does not (in certain configurations in…
• CVE-2018-16977Monstra CMS V3.0.4 has an information leakage risk (e.g., PA…
• CVE-2018-16978Monstra CMS V3.0.4 has XSS when ones tries to register an ac…
• CVE-2018-16979Monstra CMS V3.0.4 allows HTTP header injection in the plugi…
• CVE-2018-1698IBM Maximo Asset Management 7.6 through 7.6.3 could allow an…5.3
• CVE-2018-16981stb stb_image.h 2.19, as used in catimg, Emscripten, and oth…8.8
• CVE-2018-16982Open Chinese Convert (OpenCC) 1.0.5 allows attackers to caus…
• CVE-2018-16983NoScript Classic before 5.1.8.7, as used in Tor Browser 7.x …
• CVE-2018-16984An issue was discovered in Django 2.1 before 2.1.2, in which…
• CVE-2018-16985In Lizard (formerly LZ5) 2.0, use of an invalid memory addre…
• CVE-2018-16986Texas Instruments BLE-STACK v2.2.1 for SimpleLink CC2640 and…