CVE-2021-31858

Publication date

2022-07-20 12:47:43

Family

mitre

State

PUBLISHED

Description

DotNetNuke (DNN) 9.9.1 CMS is vulnerable to a Stored Cross-Site Scripting vulnerability in the user profile biography section which allows remote authenticated users to inject arbitrary code via a crafted payload.