| Package | Affected versions | Patched versions |
|---|---|---|
| dotnetnuke | = 4.9.1= 4.9.2= 5.1.1= 5.1.2= 5.1.3= 5.1.4= 6.0.0= 6.0.1= 6.0.2≤ 5.6.3 | |
| dotnetnuke | = 4.9.0= 4.9.3= 4.9.4= 4.9.5= 5.0.0= 5.0.1= 5.1.0= 5.2.0= 5.2.1= 5.2.2= 5.2.3= 5.3.0= 5.3.1= 5.4.0= 5.4.1= 5.4.2= 5.4.3= 5.4.4= 5.5.0= 5.5.1= 5.6.0= 5.6.1= 5.6.2 |
Cross-site scripting (XSS) vulnerability in the telerik HTML editor in DotNetNuke before 5.6.4 and 6.x before 6.1.0 allows remote attackers to inject arbitrary web script or HTML via a message.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free