Security Advisory

CVE-2021-31858

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-07-20 12:47:43
Last updated 2024-08-03 23:10:30
Assigner mitre
State PUBLISHED

Description

DotNetNuke (DNN) 9.9.1 CMS is vulnerable to a Stored Cross-Site Scripting vulnerability in the user profile biography section which allows remote authenticated users to inject arbitrary code via a crafted payload.