1 matches found
CVE-2021-31858: Improper Neutralization of Input During Web Page Generation
DotNetNuke DNN 9.9.1 CMS is vulnerable to a Stored Cross-Site Scripting vulnerability in the user profile biography section which allows remote authenticated users to inject arbitrary code via a crafted payload...
5.4CVSS6.2AI score0.00634EPSS
SaveExploits0References2
20