|
DotNetNuke User Registration Information HTML Injection Vulnerability
DotNetNuke is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content. Specifically, the application fails to sanitize user-supplied input that is supplied while registering a user, allowing script or HTML code to be included in user-information pages. |
|
 Privacy Statement |
