You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Provides basic references to the DotNetNuke.dll to develop extensions for the DNN Platform. For MVC or WebAPI please see other packages available as well
Path to dependency file: /generators/spa/templates/VueJS/common/packages.config
Path to vulnerable library: /generators/spa/templates/VueJS/common/packages.config,/generators/spa/templates/VueJS/common/packages/DotNetNuke.Core.9.8.0/DotNetNuke.Core.9.8.0.nupkg
DotNetNuke (DNN) 9.9.1 CMS is vulnerable to a Stored Cross-Site Scripting vulnerability in the user profile biography section which allows remote authenticated users to inject arbitrary code via a crafted payload.
mend-bolt-for-githubbot
changed the title
CVE-2021-31858 (Medium) detected in multiple libraries
CVE-2021-31858 (Medium) detected in dotnetnuke.core.9.8.0.nupkg
Nov 2, 2023
CVE-2021-31858 - Medium Severity Vulnerability
Provides basic references to the DotNetNuke.dll to develop extensions for the DNN Platform. For MVC or WebAPI please see other packages available as well
Library home page: https://api.nuget.org/packages/dotnetnuke.core.9.8.0.nupkg
Path to dependency file: /generators/spa/templates/VueJS/common/packages.config
Path to vulnerable library: /generators/spa/templates/VueJS/common/packages.config,/generators/spa/templates/VueJS/common/packages/DotNetNuke.Core.9.8.0/DotNetNuke.Core.9.8.0.nupkg
Dependency Hierarchy:
Found in HEAD commit: 1c68c9a9ea9734a0a208d80999c86ff1564255dc
Found in base branch: master
DotNetNuke (DNN) 9.9.1 CMS is vulnerable to a Stored Cross-Site Scripting vulnerability in the user profile biography section which allows remote authenticated users to inject arbitrary code via a crafted payload.
Publish Date: 2022-07-20
URL: CVE-2021-31858
Base Score Metrics:
Type: Upgrade version
Origin: https://nvd.nist.gov/vuln/detail/CVE-2021-31858
Release Date: 2022-07-20
Fix Resolution: DotNetNuke.Core - 9.11.0
Step up your Open Source Security Game with Mend here
The text was updated successfully, but these errors were encountered: