CVE-2018-10138 The CATALooK.netStore module through 7.2.8 for DNN (formerly DotNetNuke) allows XSS via the /ViewEditGoogleMaps.aspx PortalID or CATSkin parameter, or the /ImageViewer.aspx link or desc parameter.
MediumCVSS 6.1
EPSS 0.67%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The CATALooK.netStore module through 7.2.8 for DNN (formerly DotNetNuke) allows XSS via the /ViewEditGoogleMaps.aspx PortalID or CATSkin parameter, or the /ImageViewer.aspx link or desc parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| catalooksupport netstore | <= 7.2.8 | No fix listed |
References
- cxsecurity.com exploit third-party-advisory