Moderate severity vulnerability that affects DotNetNuke.Core

MEDIUM 4.3CVE-2015-1566 · GHSA-v76m-f5cx-8rg4 · Published 09/02/2015 · updated 17/06/2026

In short

CVE-2015-1566 is a MEDIUM (CVSS 4.3) vulnerability affecting DotNetNuke.Core, dotnetnuke (dnnsoftware).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.0% of all vulnerabilities.
Fix: update to 7.4.0 or later.

Package	Affected versions	Patched versions
DotNetNuke.Core NuGet	`< 7.4.0`	`7.4.0`
dotnetnuke dnnsoftware	`≤ 07.03.04`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

NVD description

Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

nvd.nist.gov/vuln/detail/CVE-2015-1566 · ADVISORY
GitHub Advisory GHSA-v76m-f5cx-8rg4 · ADVISORY
secunia.com/advisories/62832 · WEB
dnnsoftware.com/platform/manage/security-center · WEB

More vulnerabilities in DotNetNuke.Core

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

DotNetNuke.Core

NuGet

< 7.4.0

7.4.0

dotnetnuke

dnnsoftware

≤ 07.03.04

No fix yet

Description

Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

NVD description

Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

More vulnerabilities in DotNetNuke.Core

See all →