GHSA-v76m-f5cx-8rg4

ghsaUSosv

Moderate severity vulnerability that affects DotNetNuke.Core

view advisory published 2018-10-16Licence: CC-BY-4.0

Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2015-1566US	medium4.3	1.76% (78th)	—	2015-02-09
Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

references

External citations — patches, advisories, analysis.

http://secunia.com/advisories/62832WEB
http://www.dnnsoftware.com/platform/manage/security-centerWEB
https://github.com/advisories/GHSA-v76m-f5cx-8rg4ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2015-1566ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan