Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable.
XSS
NVD
VulDB
CVSS 2.0
3.5
EPSS
0.2%