← All advisories

Medium severity6.1NVD Advisory· Published May 14, 2019· Updated Jun 17, 2026

CVE-2019-11846

CVE-2019-11846

Description

/servlets/ajax_file_upload?fieldName=binary3 in dotCMS 5.1.1 allows XSS and HTML Injection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Dotcms/Dotcms2 versions
cpe:2.3:a:dotcms:dotcms:5.1.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:dotcms:dotcms:5.1.1:*:*:*:*:*:*:*
- (no CPE)range: =5.1.1
dotCMS/dotCMSdescription

Patches

Vulnerability mechanics

References

1

packetstormsecurity.com/files/152788/dotCMS-5.1.1-HTML-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.