← Database

CVE-2004-2325

MEDIUM CVSS: 4.3 Published: 2004-12-31 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in EditModule.aspx for DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to inject arbitrary web script or HTML.

Affected Platforms

Dnnsoftware Dotnetnuke

Weakness Type

NVD-CWE-Other

References