mirror of
https://github.com/0xMarcio/cve.git
synced 2026-02-13 11:22:49 +00:00
734 B
734 B
CVE-2016-7119
Description
Cross-site scripting (XSS) vulnerability in the user-profile biography section in DotNetNuke (DNN) before 8.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted onclick attribute in an IMG element.