VYPR

UsersExportImport

by forDNN

CVEs (1)

  • CVE-2019-19392CriJan 21, 2020
    risk 0.64cvss 9.8epss 0.01

    The forDNN.UsersExportImport module before 1.2.0 for DNN (formerly DotNetNuke) allows an unprivileged user to import (create) new users with Administrator privileges, as demonstrated by Roles="Administrators" in XML or CSV data.