{"id":"CVE-2015-1566","published":"2015-02-09T17:00:00Z","modified":"2024-09-16T20:51:57Z","title":"Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 7.4.0 allows remote attackers to inject arbitrary…","vendor":null,"product":null,"tier":"tail","description":{"text":"Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.01762,"percentile":0.7794,"provenance":"source"},"cwes":[],"references":[{"url":"http://www.dnnsoftware.com/platform/manage/security-center","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/62832","tags":["third-party-advisory","x_refsource_SECUNIA"]}],"priority":{"score":15.6,"factors":[{"name":"EPSS percentile","points":15.59}]},"affected":[{"ecosystem":"NuGet","package":"DotNetNuke.Core","vulnerableRanges":["<7.4.0"],"patched":["7.4.0"],"from":["GHSA-v76m-f5cx-8rg4"],"provenance":"source"}],"euvd":{"id":"EUVD-2018-0693","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2008-6540","published":"2009-03-30","fixed":"4.8.2","kev":false},{"cve":"CVE-2013-4649","published":"2014-03-12","fixed":"7.1.1","kev":false},{"cve":"CVE-2013-7335","published":"2014-03-12","fixed":"7.1.1","kev":false,"link":{"from":"CVE-2013-7335","to":"CVE-2015-1566","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"NuGet:DotNetNuke.Core","fromFixed":"7.1.1","toFixed":"7.4.0","daysApart":334}]}},{"cve":"CVE-2015-1566","published":"2015-02-09","fixed":"7.4.0","kev":false},{"cve":"CVE-2015-2794","published":"2017-02-06","fixed":"7.4.1","kev":false,"link":{"from":"CVE-2015-1566","to":"CVE-2015-2794","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"NuGet:DotNetNuke.Core","fromFixed":"7.4.0","toFixed":"7.4.1","daysApart":728}]}},{"cve":"CVE-2016-7119","published":"2016-08-31","fixed":"8.0.1","kev":false},{"cve":"CVE-2017-9822","published":"2017-07-20","fixed":"9.1.1","kev":true}],"package":"NuGet:DotNetNuke.Core"}}