{"action":"Upgrade DotNetNuke.Core to 6.2.9 (6.x) or 7.1.1 (7.x) or later.","affected":[{"fixed":"6.2.9","introduced":"0"},{"fixed":"7.1.1","introduced":"7.0"}],"component":"DotNetNuke.Core","cve_ids":["CVE-2013-4649"],"ecosystem":"NuGet","epss":0.02467,"exploited":false,"fixed_versions":["6.2.9","7.1.1"],"ghsa_id":"GHSA-rvrj-j7cc-236p","id":"tcs_01M5N90PDETHCV4BXM0N77XMV0","modified_at":"2024-12-05T05:27:28.028351Z","published_at":"2022-05-17T01:33:02Z","references":["https://osv.dev/vulnerability/GHSA-rvrj-j7cc-236p","https://nvd.nist.gov/vuln/detail/CVE-2013-4649","https://exchange.xforce.ibmcloud.com/vulnerabilities/86432","https://github.com/dnnsoftware/Dnn.Platform","http://packetstormsecurity.com/files/122792/DotNetNuke-DNN-7.1.0-6.2.8-Cross-Site-Scripting.html","http://secunia.com/advisories/53493","http://www.dnnsoftware.com/platform/manage/security-center"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-rvrj-j7cc-236p","url":"https://osv.dev/vulnerability/GHSA-rvrj-j7cc-236p"}],"summary":"DotNetNuke (DNN) Cross-site scripting (XSS) vulnerability via the __dnnVariable parameter"}