| Package | Affected versions | Patched versions |
|---|---|---|
| usersexportimport | < 1.2.0 | 1.2.0 |
The forDNN.UsersExportImport module before 1.2.0 for DNN (formerly DotNetNuke) allows an unprivileged user to import (create) new users with Administrator privileges, as demonstrated by Roles="Administrators" in XML or CSV data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free