A vulnerability was found in DoraCMS up to 2.18 and classified as problematic. Affected by this issue is the function markdown0 of the file /app/public/apidoc/oas3/wrap-components/markdown.jsx. The manipulation leads to cross site scripting.

This vulnerability is handled as CVE-2024-28715. The attack may be launched remotely. There is no exploit available.