CVE-2013-3943

Published: Mar 12, 2014Modified: May 6, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the Display Name field in the Manage Profile.

Affected (65)

Products: Dnnsoftware: Dotnetnuke

Dnnsoftware

1 product

Dotnetnuke

Configuration A

65 vulnerable

Vulnerable Software	Affected Versions
Dnnsoftware Dotnetnuke	Up to 6.2.8
Dnnsoftware Dotnetnuke	Version 1.0.10d
Dnnsoftware Dotnetnuke	Version 1.0.10e
Dnnsoftware Dotnetnuke	Version 1.0.6
Dnnsoftware Dotnetnuke	Version 1.0.7
Dnnsoftware Dotnetnuke	Version 1.0.8
Dnnsoftware Dotnetnuke	Version 1.0.9
Dnnsoftware Dotnetnuke	Version 2.1.1
Dnnsoftware Dotnetnuke	Version 2.1.2
Dnnsoftware Dotnetnuke	Version 3.0.11
Dnnsoftware Dotnetnuke	Version 3.0.7
Dnnsoftware Dotnetnuke	Version 3.0.8
Dnnsoftware Dotnetnuke	Version 3.1.0
Dnnsoftware Dotnetnuke	Version 3.3.5
Dnnsoftware Dotnetnuke	Version 4.0
Dnnsoftware Dotnetnuke	Version 4.3.5
Dnnsoftware Dotnetnuke	Version 4.4.1
Dnnsoftware Dotnetnuke	Version 4.5.2
Dnnsoftware Dotnetnuke	Version 4.5.4
Dnnsoftware Dotnetnuke	Version 4.5.5
Dnnsoftware Dotnetnuke	Version 4.6.0
Dnnsoftware Dotnetnuke	Version 4.6.1
Dnnsoftware Dotnetnuke	Version 4.6.2
Dnnsoftware Dotnetnuke	Version 4.7.0
Dnnsoftware Dotnetnuke	Version 4.8.0
Dnnsoftware Dotnetnuke	Version 4.8.1
Dnnsoftware Dotnetnuke	Version 4.8.2
Dnnsoftware Dotnetnuke	Version 4.8.3
Dnnsoftware Dotnetnuke	Version 4.8.4
Dnnsoftware Dotnetnuke	Version 4.9.1
Dnnsoftware Dotnetnuke	Version 4.9.2
Dnnsoftware Dotnetnuke	Version 4.9
Dnnsoftware Dotnetnuke	Version 5.05.01
Dnnsoftware Dotnetnuke	Version 5.06.00
Dnnsoftware Dotnetnuke	Version 5.0
Dnnsoftware Dotnetnuke	Version 5.1.1
Dnnsoftware Dotnetnuke	Version 5.1.2
Dnnsoftware Dotnetnuke	Version 5.1.3
Dnnsoftware Dotnetnuke	Version 5.1.4
Dnnsoftware Dotnetnuke	Version 5.1
Dnnsoftware Dotnetnuke	Version 6.0.0
Dnnsoftware Dotnetnuke	Version 6.0.1
Dnnsoftware Dotnetnuke	Version 6.0.2
Dnnsoftware Dotnetnuke	Version 6.1.0
Dnnsoftware Dotnetnuke	Version 6.1.1
Dnnsoftware Dotnetnuke	Version 6.1.2
Dnnsoftware Dotnetnuke	Version 6.1.3
Dnnsoftware Dotnetnuke	Version 6.1.4
Dnnsoftware Dotnetnuke	Version 6.1.5
Dnnsoftware Dotnetnuke	Version 6.2.0
Dnnsoftware Dotnetnuke	Version 6.2.1
Dnnsoftware Dotnetnuke	Version 6.2.2
Dnnsoftware Dotnetnuke	Version 6.2.3
Dnnsoftware Dotnetnuke	Version 6.2.4
Dnnsoftware Dotnetnuke	Version 6.2.5
Dnnsoftware Dotnetnuke	Version 6.2.6
Dnnsoftware Dotnetnuke	Version 6.2.7
Dnnsoftware Dotnetnuke	Version 7.0.0
Dnnsoftware Dotnetnuke	Version 7.0.1
Dnnsoftware Dotnetnuke	Version 7.0.2
Dnnsoftware Dotnetnuke	Version 7.0.3
Dnnsoftware Dotnetnuke	Version 7.0.4
Dnnsoftware Dotnetnuke	Version 7.0.5
Dnnsoftware Dotnetnuke	Version 7.0.6
Dnnsoftware Dotnetnuke	Version 7.1.0