Cross-site scripting (XSS) vulnerability in the user-profile biography section in DotNetNuke (DNN)

2018-10-1619:34:10

Google

osv.dev

EPSS

0.001

Percentile

28.6%

JSON

Cross-site scripting (XSS) vulnerability in the user-profile biography section in DotNetNuke (DNN) before 8.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted onclick attribute in an IMG element.

References

www.dnnsoftware.com/community/security/security-center

www.securityfocus.com/bid/92719

github.com/advisories/GHSA-5c66-x4wm-rjfx

nvd.nist.gov/vuln/detail/CVE-2016-7119

EPSS

0.001

Percentile

28.6%

JSON

Related for OSV:GHSA-5C66-X4WM-RJFX