MEDIUM
GHSA-79m3-rvx2-3qq9
Reflected Cross-Site Scripting (XSS) in module actions in edit mode
Quick fix
GHSA-79m3-rvx2-3qq9 — DotNetNuke.Web: upgrade to the fixed version with the command below.
dotnet add package DotNetNuke.Web --version 9.13.9Details
A specially crafted URL may be constructed which can inject an XSS payload that is triggered by using some module actions.
Are you affected?
Enter the version of the package you're using.
Affected packages
NuGet/DotNetNuke.Web
Introduced in:
0Fixed in: 9.13.9Fix
dotnet add package DotNetNuke.Web --version 9.13.9NuGet/DotNetNuke.Core
Introduced in:
0Fixed in: 9.13.9Fix
dotnet add package DotNetNuke.Core --version 9.13.9