DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, the Prompt module allows execution of commands that can return raw HTML. Malicious input, even if sanitized for display elsewhere, can be executed when processed through certain commands, leading to potential script execution (XSS). This issue has been patched in version 10.1.0.
The Prompt module in DNN allows execution of commands that can return raw HTML code. Malicious input, even if properly sanitized in other places in the application, can be processed by specific Prompt module commands without adequate sanitization. This results in embedding and execution of uncontrolled script code (XSS) in the user's browser.
An attacker can execute arbitrary JavaScript code in the context of a logged-in user's session, which may lead to account takeover, session data theft, or further compromise of application integrity and confidentiality.
Update the DNN platform to version 10.1.0 or later, where the issue has been fixed. Details available in vendor references: https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-2qxc-mf4x-wr29
DNN (DotNetNuke) in all versions before 10.1.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:HDnnsoftware Dotnetnuke
APPDnnsoftware< 10.1.0
Related vulnerabilities
DNN/DotNetNuke: XSS w tytule modułu umożliwia wykonanie skryptów
DNN/DotNetNuke: nieuwierzytelnione przesyłanie i nadpisywanie plików (RCE/XSS)
DotNetNuke: nieautoryzowana reinstalacja aplikacji i przejęcie konta SuperUser
DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters.
DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: thi...