Search Results (42 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2018-14486 1 Dnnsoftware 1 Dotnetnuke 2024-11-21 N/A
DNN (formerly DotNetNuke) 9.1.1 allows cross-site scripting (XSS) via XML.
CVE-2017-0929 1 Dnnsoftware 1 Dotnetnuke 2024-11-21 N/A
DNN (aka DotNetNuke) before 9.2.0 suffers from a Server-Side Request Forgery (SSRF) vulnerability in the DnnImageHandler class. Attackers may be able to access information about internal network resources.