CVE-2012-1036

Published: Apr 11, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the telerik HTML editor in DotNetNuke before 5.6.4 and 6.x before 6.1.0 allows remote attackers to inject arbitrary web script or HTML via a message.

Affected (33)

Products: Dnnsoftware: Dotnetnuke · Dotnetnuke: Dotnetnuke

Dnnsoftware

1 product

Dotnetnuke

1 product

Dotnetnuke

Configuration A

30 vulnerable

Vulnerable Software	Affected Versions
Dnnsoftware Dotnetnuke	Up to 5.6.3
Dnnsoftware Dotnetnuke	Version 4.9.1
Dnnsoftware Dotnetnuke	Version 4.9.2
Dnnsoftware Dotnetnuke	Version 5.1.1
Dnnsoftware Dotnetnuke	Version 5.1.2
Dnnsoftware Dotnetnuke	Version 5.1.3
Dnnsoftware Dotnetnuke	Version 5.1.4
Dotnetnuke Dotnetnuke	Version 4.9.0
Dotnetnuke Dotnetnuke	Version 4.9.3
Dotnetnuke Dotnetnuke	Version 4.9.4
Dotnetnuke Dotnetnuke	Version 4.9.5
Dotnetnuke Dotnetnuke	Version 5.0.0
Dotnetnuke Dotnetnuke	Version 5.0.1
Dotnetnuke Dotnetnuke	Version 5.1.0
Dotnetnuke Dotnetnuke	Version 5.2.0
Dotnetnuke Dotnetnuke	Version 5.2.1
Dotnetnuke Dotnetnuke	Version 5.2.2
Dotnetnuke Dotnetnuke	Version 5.2.3
Dotnetnuke Dotnetnuke	Version 5.3.0
Dotnetnuke Dotnetnuke	Version 5.3.1
Dotnetnuke Dotnetnuke	Version 5.4.0
Dotnetnuke Dotnetnuke	Version 5.4.1
Dotnetnuke Dotnetnuke	Version 5.4.2
Dotnetnuke Dotnetnuke	Version 5.4.3
Dotnetnuke Dotnetnuke	Version 5.4.4
Dotnetnuke Dotnetnuke	Version 5.5.0
Dotnetnuke Dotnetnuke	Version 5.5.1
Dotnetnuke Dotnetnuke	Version 5.6.0
Dotnetnuke Dotnetnuke	Version 5.6.1
Dotnetnuke Dotnetnuke	Version 5.6.2