Security dotCMS 3.2.4 CSRF / XSS / Open Redirect December 8, 2015 007admin Leave a comment dotCMS version 3.2.4 suffers from cross site request forgery, cross site scripting, and open redirection vulnerabilities.