MEDIUM

GHSA-v76m-f5cx-8rg4

Moderate severity vulnerability that affects DotNetNuke.Core

Quick fix

GHSA-v76m-f5cx-8rg4 — DotNetNuke.Core: upgrade to the fixed version with the command below.

dotnet add package DotNetNuke.Core --version 7.4.0

Details

Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Are you affected?

Enter the version of the package you're using.

Affected packages

NuGet/DotNetNuke.Core

Introduced in: 0Fixed in: 7.4.0

Fixdotnet add package DotNetNuke.Core --version 7.4.0

References

https://nvd.nist.gov/vuln/detail/CVE-2015-1566[ADVISORY]
https://github.com/advisories/GHSA-v76m-f5cx-8rg4[ADVISORY]
http://secunia.com/advisories/62832[WEB]
http://www.dnnsoftware.com/platform/manage/security-center[WEB]