NVD CVE-2017-6003 March 26, 2017 007admin Leave a comment dotCMS 3.7.0 has XSS reachable from ext/languages_manager/edit_language in portal/layout via the bottom two form fields.