dotCMS 3.7.0 has XSS reachable from ext/languages_manager/edit_language in portal/layout via the bottom two form fields.Referenceshttp://www.securityfocus.com/bid/97089http://www.yiwang6.cn/dotcms.docx
