CVE-2015-8831

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.08%

Published

Feb 9, 2017

Modified

May 12, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in admin/comments.php in Dotclear before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via the author name in a comment.

Weaknesses (CWE)

CWE-79

Affected Products (1)

dotclear · dotclearvulnerable

References (16)

http://dotclear.org/blog/post/2015/10/25/Dotclear-2.8.2

Release NotesVendor Advisory

http://packetstormsecurity.com/files/134353/dotclear-2.8.1-Cross-Site-Scripting.html

ExploitThird Party AdvisoryVDB Entry

http://seclists.org/fulldisclosure/2015/Nov/59

Mailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/03/05/4

Mailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/03/07/5

Mailing ListPatchThird Party Advisory

http://www.securityfocus.com/bid/96377

https://blog.curesec.com/article/blog/dotclear-281-XSS-94.html

ExploitPatchThird Party Advisory

https://hg.dotclear.org/dotclear/rev/65e65154dadf

Issue TrackingPatchVendor Advisory

http://dotclear.org/blog/post/2015/10/25/Dotclear-2.8.2

Release NotesVendor Advisory

http://packetstormsecurity.com/files/134353/dotclear-2.8.1-Cross-Site-Scripting.html

ExploitThird Party AdvisoryVDB Entry

http://seclists.org/fulldisclosure/2015/Nov/59

Mailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/03/05/4

Mailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/03/07/5

Mailing ListPatchThird Party Advisory

http://www.securityfocus.com/bid/96377

https://blog.curesec.com/article/blog/dotclear-281-XSS-94.html

ExploitPatchThird Party Advisory

https://hg.dotclear.org/dotclear/rev/65e65154dadf

Issue TrackingPatchVendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs