PT-2014-2846

Name of the Vulnerable Software and Affected Versions DotNetNuke versions prior to 6.2.9 DotNetNuke versions 7.x prior to 7.1.1 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the dnnVariable parameter to the default URI. Recommendations...