Moderate severity vulnerability that affects DotNetNuke.Core

MÉDIO 4.3CVE-2015-1566 · GHSA-v76m-f5cx-8rg4 · Published 09/02/2015 · updated 17/06/2026

Em resumo

CVE-2015-1566 é uma vulnerabilidade MÉDIO (CVSS 4.3) que afeta DotNetNuke.Core, dotnetnuke (dnnsoftware).
Chance de exploração nos próximos 30 dias (EPSS): 1.8%, maior que 78.0% das vulnerabilidades.
Correção: atualize para 7.4.0 ou posterior.

Package	Affected versions	Patched versions
DotNetNuke.Core NuGet	`< 7.4.0`	`7.4.0`
dotnetnuke dnnsoftware	`≤ 07.03.04`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

NVD description

Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

nvd.nist.gov/vuln/detail/CVE-2015-1566 · ADVISORY
GitHub Advisory GHSA-v76m-f5cx-8rg4 · ADVISORY
secunia.com/advisories/62832 · WEB
dnnsoftware.com/platform/manage/security-center · WEB

Mais vulnerabilidades de DotNetNuke.Core

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

DotNetNuke.Core

NuGet

< 7.4.0

7.4.0

dotnetnuke

dnnsoftware

≤ 07.03.04

No fix yet

Description

Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

NVD description

Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Mais vulnerabilidades de DotNetNuke.Core

Ver tudo →