Skip to content

CVE-2018-14486 DNN XSS Vulnerability

MediumCVSS 6.1 EPSS 1.1% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

DNN (formerly DotNetNuke) 9.1.1 allows cross-site scripting (XSS) via XML.

Affected products

ProductAffected versionsFixed in
nuget DotNetNuke.Core(NuGet) <= 9.1.1 No fix listed
nuget DotNetNuke.Core(NuGet) = 6.0.0 No fix listed
nuget DotNetNuke.Core(NuGet) = 7.0.0 No fix listed
nuget DotNetNuke.Core(NuGet) = 7.0.6.121 No fix listed
nuget DotNetNuke.Core(NuGet) = 7.1.0 No fix listed
nuget DotNetNuke.Core(NuGet) = 7.1.2 No fix listed
nuget DotNetNuke.Core(NuGet) = 7.2.0.613 No fix listed
nuget DotNetNuke.Core(NuGet) = 7.3.0.499 No fix listed
nuget DotNetNuke.Core(NuGet) = 7.3.1.20 No fix listed
nuget DotNetNuke.Core(NuGet) = 7.4.0.353 No fix listed
nuget DotNetNuke.Core(NuGet) = 7.4.1.280 No fix listed
nuget DotNetNuke.Core(NuGet) = 7.4.2.216 No fix listed
nuget DotNetNuke.Core(NuGet) = 8.0.0.809 No fix listed
nuget DotNetNuke.Core(NuGet) = 8.0.1.239 No fix listed
nuget DotNetNuke.Core(NuGet) = 8.0.2.4 No fix listed
nuget DotNetNuke.Core(NuGet) = 8.0.3.5 No fix listed
nuget DotNetNuke.Core(NuGet) = 8.0.4.226 No fix listed
nuget DotNetNuke.Core(NuGet) = 9.0.0.1002 No fix listed
nuget DotNetNuke.Core(NuGet) = 9.0.1.142 No fix listed
nuget DotNetNuke.Core(NuGet) = 9.1.0.367 No fix listed
dnnsoftware dotnetnuke = 9.1.1 No fix listed

References