{"id":"CVE-2016-7119","published":"2016-08-31T14:00:00Z","modified":"2024-08-06T01:50:47Z","title":"Cross-site scripting (XSS) vulnerability in the user-profile biography section in DotNetNuke (DNN) before 8.0.1 allows…","vendor":null,"product":null,"tier":"tail","description":{"text":"Cross-site scripting (XSS) vulnerability in the user-profile biography section in DotNetNuke (DNN) before 8.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted onclick attribute in an IMG element.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00657,"percentile":0.51155,"provenance":"source"},"cwes":[],"references":[{"url":"http://www.dnnsoftware.com/community/security/security-center","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/bid/92719","tags":["vdb-entry","x_refsource_BID"]}],"priority":{"score":10.2,"factors":[{"name":"EPSS percentile","points":10.23}]},"affected":[{"ecosystem":"NuGet","package":"DotNetNuke.Core","vulnerableRanges":["<8.0.1"],"patched":["8.0.1"],"from":["GHSA-5c66-x4wm-rjfx"],"provenance":"source"}],"euvd":{"id":"EUVD-2018-0509","exploited":false,"provenance":"source"}}