Cross Site Scripting vulnerability in DOraCMS v.2.18 and before allows a remote attacker to execute arbitrary code via the markdown0 function in the /app/public/apidoc/oas3/wrap-components/markdown.jsx endpoint.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://github.com/Lq0ne/CVE-2024-28715 | Third Party Advisory |
| https://github.com/Lq0ne/CVE-2024-28715 | Third Party Advisory |
Configurations
History
24 Jun 2025, 01:35
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/Lq0ne/CVE-2024-28715 - Third Party Advisory | |
| First Time |
Html-js
Html-js doracms |
|
| CPE | cpe:2.3:a:html-js:doracms:*:*:*:*:*:*:*:* |
19 Mar 2024, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-19 21:15
Updated : 2025-06-24 01:35
NVD link : CVE-2024-28715
Mitre link : CVE-2024-28715
JSON object : View
Products Affected
html-js
- doracms
CWE
No CWE.