CVE-2015-1566

EPSS 0.25%

Moderate severity vulnerability that affects DotNetNuke.Core

發布日:2018/10/16修改日:2024/12/2

描述

Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

受影響套件(1)

NuGet/DotNetNuke.Corefrom 0, < 7.4.0

參考連結(4)

ADVISORYhttps://github.com/advisories/GHSA-v76m-f5cx-8rg4
ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2015-1566
WEBhttp://secunia.com/advisories/62832
WEBhttp://www.dnnsoftware.com/platform/manage/security-center