CVE-2017-6003: dotCMS

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

dotCMS 3.7.0 has XSS reachable from ext/languages_manager/edit_language in portal/layout via the bottom two form fields.

Affected products

• dotCMS dotCMS: version 3.7.0 only

Published 2017-03-27. Last modified 2026-06-17.