Dotclear

Dotclear is a self-hosted blogging and content-management platform whose vulnerability footprint, while concentrated in a single product, sits at the intersection of web-application input handling and file-upload workflows. The vendor's disclosures recur consistently through application-layer weakness classes including cross-site scripting, code injection, unsafe file uploads, and improper access control—flaws typical of content-management systems where user input, template rendering, and privilege boundaries are core attack surfaces. Notably, vulnerabilities affecting this vendor frequently acquire public exploit code, reflecting both the open-source nature of the platform and the accessibility of its deployment model. Defenders should treat updates to this vendor's core product as a patching priority for any instances exposed to untrusted content contribution or network access; live severity, exploitation, and exposure counts are shown alongside this summary.