5 matches found
CVE-2021-31858
DotNetNuke DNN 9.9.1 CMS is vulnerable to a Stored Cross-Site Scripting vulnerability in the user profile biography section which allows remote authenticated users to inject arbitrary code via a crafted payload...
PT-2022-10055
Name of the Vulnerable Software and Affected Versions DotNetNuke DNN version 9.9.1 Description The issue concerns a Stored Cross-Site Scripting vulnerability in the user profile biography section. This allows remote authenticated users to inject arbitrary code via a crafted payload. Recommendatio...
CVE-2021-31858: Improper Neutralization of Input During Web Page Generation
DotNetNuke DNN 9.9.1 CMS is vulnerable to a Stored Cross-Site Scripting vulnerability in the user profile biography section which allows remote authenticated users to inject arbitrary code via a crafted payload...
PT-2016-7228
Name of the Vulnerable Software and Affected Versions DotNetNuke DNN versions prior to 8.0.1 Description The issue is related to a cross-site scripting XSS vulnerability in the user-profile biography section. This allows remote authenticated users to inject arbitrary web script or HTML via a...
CVE-2016-7119: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the user-profile biography section in DotNetNuke DNN before 8.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted onclick attribute in an IMG element...