← Database

CVE-2008-6732

MEDIUM CVSS: 4.3 Published: 2009-04-21 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in the Language skin object in DotNetNuke before 4.8.4 allows remote attackers to inject arbitrary web script or HTML via "newly generated paths."

Affected Platforms

Dnnsoftware Dotnetnuke

Weakness Type

CWE-79

References