Open Redirection

DotNetNuke.Core is vulnerable to open redirection. A remote attacker is able to redirect users to a malicious page and perform phishing attacks to steal confidential information such as a user’s username and password.