Search vulnerabilities

Results 2

Export CSV
CVE-2012-1036

Cross-site scripting (XSS) vulnerability in the telerik HTML editor in DotNetNuke before 5.6.4 and 6.x before 6.1.0 allows remote attackers to inject arbitrary web script or HTML via a message.

CVSS 2.0 · 4.3 Medium EPSS < 1% KEV · Not listed
CVE-2007-0660

Cross-site scripting (XSS) vulnerability in the IFrame module before 03.02.01 for DotNetNuke (DNN) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "Pass through values."

CVSS 2.0 · 6.8 Medium EPSS 1.3% KEV · Not listed
Vendors