Описание
DotNetNuke.Core Vulnerable to Stored XSS via Module Title
Module title supports richtext which could include scripts that would execute in certain scenarios.
Пакеты
Наименование
DotNetNuke.Core
nuget
Затронутые версииВерсия исправления
< 9.13.10
9.13.10
Наименование
DotNetNuke.Core
nuget
Затронутые версииВерсия исправления
>= 10.0.0, < 10.2.0
10.2.0
Связанные уязвимости
CVSS3: 9.1
nvd
10 дней назад
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to versions 9.13.10 and 10.2.0, module title supports richtext which could include scripts that would execute in certain scenarios. Versions 9.13.10 and 10.2.0 contain a fix for the issue.