GHSA-jjwg-4948-6wxp
Suggest an improvement- Source
- https://github.com/advisories/GHSA-jjwg-4948-6wxp
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/01/GHSA-jjwg-4948-6wxp/GHSA-jjwg-4948-6wxp.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-jjwg-4948-6wxp
- Aliases
- Published
- 2026-01-28T16:20:18Z
- Modified
- 2026-02-04T23:46:44.396611Z
- Severity
-
- 6.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N CVSS Calculator
- Summary
- DotNetNuke.Core has a potential XSS vulnerability in modules' header and footer
- Details
-
A content editor could inject scripts in module headers/footers that would run for other users.
- Database specific
{ "nvd_published_at": "2026-01-28T00:15:50Z", "cwe_ids": [ "CWE-79" ], "github_reviewed_at": "2026-01-28T16:20:18Z", "severity": "MODERATE", "github_reviewed": true }- References
Affected packages
NuGet / DotNetNuke.Core
Package
- Name
- DotNetNuke.Core
- View open source insights on deps.dev
- Purl
- pkg:nuget/DotNetNuke.Core
Affected versions
9.*
9.0.0.1002
9.0.1.142
9.1.0.367
9.1.1.129
9.2.0.366
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0-ci0000
9.13.0
9.13.1
9.13.2
9.13.3
9.13.4
9.13.5-ci0062
9.13.5
9.13.6
9.13.7-ci0064
9.13.7
9.13.8
9.13.9
NuGet / DotNetNuke.Core
Package
- Name
- DotNetNuke.Core
- View open source insights on deps.dev
- Purl
- pkg:nuget/DotNetNuke.Core