← All advisories

Medium severity6.1OSV Advisory· Published Mar 21, 2019· Updated Jun 17, 2026

CVE-2018-14486

CVE-2018-14486

Description

DNN (formerly DotNetNuke) 9.1.1 allows cross-site scripting (XSS) via XML.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
DotNetNuke.CoreNuGet	<= 9.1.1	—

Affected products

3

Dnnsoftware/DotnetnukeOSV2 versions
v9.1.0, v9.1.1+ 1 more
- (no CPE)range: v9.1.0, v9.1.1
- cpe:2.3:a:dnnsoftware:dotnetnuke:9.1.1:*:*:*:*:*:*:*
ghsa-coords
pkg:nuget/dotnetnuke.core
Range: <= 9.1.1

Patches

Vulnerability mechanics

References

4

packetstormsecurity.com/files/151304/DNN-9.1-XML-Related-Cross-Site-Scripting.htmlnvdExploitThird Party AdvisoryVDB EntryWEB
www.dnnsoftware.com/community/security/security-centernvdRelease NotesVendor Advisory
github.com/advisories/GHSA-m6w9-8cxc-jff7ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-14486ghsaADVISORY

News mentions

0

No linked articles in our index yet.