Moderate severity vulnerability that affects DotNetNuke.Core

2018-10-1619:33:25

Google

osv.dev

0.001 Low

EPSS

Percentile

46.0%

JSON

Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
dotnetnuke.coreeq7.1.2
dotnetnuke.coreeq7.2.0.613
dotnetnuke.coreeq7.0.6.121
dotnetnuke.coreeq7.3.1.20
dotnetnuke.coreeq7.0.0
dotnetnuke.coreeq6.0.0
dotnetnuke.coreeq7.1.0
dotnetnuke.coreeq7.3.0.499

Name	Operator	Version
dotnetnuke.core	eq	7.1.2
dotnetnuke.core	eq	7.2.0.613
dotnetnuke.core	eq	7.0.6.121
dotnetnuke.core	eq	7.3.1.20
dotnetnuke.core	eq	7.0.0
dotnetnuke.core	eq	6.0.0
dotnetnuke.core	eq	7.1.0
dotnetnuke.core	eq	7.3.0.499