CVE-2016-7119: XSS

Q: What is the severity of CVE-2016-7119?

CVE-2016-7119 is considered a medium severity vulnerability due to the potential for XSS exploits.

Q: How do I fix CVE-2016-7119?

To fix CVE-2016-7119, upgrade your DotNetNuke installation to version 8.0.1 or later.

Q: Who is affected by CVE-2016-7119?

CVE-2016-7119 affects users of DotNetNuke versions prior to 8.0.1 who have access to the user-profile biography section.

Q: What type of vulnerability is CVE-2016-7119?

CVE-2016-7119 is classified as a Cross-Site Scripting (XSS) vulnerability.

Q: What impact does CVE-2016-7119 have on users?

CVE-2016-7119 allows remote authenticated users to inject arbitrary web scripts or HTML, potentially compromising other users' experiences.

Published Aug 31, 2016

Updated

Cross-site scripting (XSS) vulnerability in the user-profile biography section in DotNetNuke (DNN) before 8.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted onclick attribute in an IMG element.

Affected Software

2 affected components

DotNetNuke DotNetNuke<=08.00.04

dnnsoftware Dotnetnuke<=08.00.04

Remediation

Patch Available

http://www.dnnsoftware.com/community/security/security-center

Event History

Aug 31, 2016

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Data Sourced

via NVD·02:59 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2016-7119?

CVE-2016-7119 is considered a medium severity vulnerability due to the potential for XSS exploits.

How do I fix CVE-2016-7119?

To fix CVE-2016-7119, upgrade your DotNetNuke installation to version 8.0.1 or later.

Who is affected by CVE-2016-7119?