CVE-2019-12562

Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0 allows remote attackers to store and embed the malicious script into the admin…

published September 26, 2019

CVSS
—
EPSS
6%
Percentile
93.5
In the wild
Unconfirmed
What it is

Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0 allows remote attackers to store and embed the malicious script into the admin notification page. The exploit could be used to perfom any action with admin privileges such as managing content, adding users, uploading backdoors to the server, etc. Successful exploitation occurs when an admin user visits a notification page with stored cross-site scripting.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06152 · 93.5th percentile
Published
2019-09-26T19:48Z
EPSS history
Timeline
  • 26 SEP 19:48Z
    Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0 allows remote attackers to store and embed the malicious script into the admin…
    cvelistv5