← Database

CVE-2022-47053

MEDIUM CVSS: 5.4 Published: 2023-04-12 Modified: 2026-06-17

Description

An arbitrary file upload vulnerability in the Digital Assets Manager module of DNN Corp DotNetNuke v7.0.0 to v9.10.2 allows attackers to execute arbitrary code via a crafted SVG file.

Affected Platforms

Dnnsoftware Dotnetnuke

Weakness Type

CWE-79, CWE-79

References