CVE-2007-0660

Description

Cross-site scripting (XSS) vulnerability in the IFrame module before 03.02.01 for DotNetNuke (DNN) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "Pass through values."

Risk Information

Base Score

8.6

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C

EPSS Score

Exploitation Probability

1.24

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2007-0660 are fixed in Nuget - DotNetNuke.Core 03.02.01	Windows
Vulnerabilities CVE-2007-0660 are fixed in Nuget - DotNetNuke.Core for Linux 03.02.01	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234