CVE-2020-5186

2020-02-2415:15:11

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.9%

JSON

DNN (formerly DotNetNuke) through 9.4.4 allows XSS (issue 1 of 2).

CPENameOperatorVersion
dnn.platformeq9.4.0-rc0
dnn.platformeq9.4.3
dnn.platformeq9.4.2
dnn.platformeq9.4.1
dnn.platformeq9.2.1-rc1
dnn.platformeq9.3.1-rc0
dnn.platformeq9.2.2-rc0
dnn.platformeq9.2.1-rc0
dnn.platformeq9.3.1
dnn.platformeq9.4.2-rc1

Name	Operator	Version
dnn.platform	eq	9.4.0-rc0
dnn.platform	eq	9.4.3
dnn.platform	eq	9.4.2
dnn.platform	eq	9.4.1
dnn.platform	eq	9.2.1-rc1
dnn.platform	eq	9.3.1-rc0
dnn.platform	eq	9.2.2-rc0
dnn.platform	eq	9.2.1-rc0
dnn.platform	eq	9.3.1
dnn.platform	eq	9.4.2-rc1