|
DotNetNuke Failed Logon Username Application Logs HTML Injection Vulnerability
DotNetNuke is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content. Specifically, the application fails to sanitize user-supplied input that is supplied as a failed logon Username string value, allowing script or HTML code to be included in application log files. |
|
 Privacy Statement |
