| Package | Affected versions | Patched versions |
|---|---|---|
| dotnetnuke | < 9.13.4 | 9.13.4 |
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. A url could be crafted to the DNN ImageHandler to render text from a querystring parameter. This text would display in the resulting image and a user that trusts the domain might think that the information is legitimate. This vulnerability is fixed in 9.13.4.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free