Fordnn: >> Usersexportimport Security Vulnerabilities
The forDNN.UsersExportImport module before 1.2.0 for DNN (formerly DotNetNuke) allows an unprivileged user to import (create) new users with Administrator privileges, as demonstrated by Roles="Administrators" in XML or CSV data.
CVSS Score
9.8
EPSS Score
0.007
Published
2020-01-21