CVE-2013-3943

LOW · CVSS 3.5 EPSS 0.94%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-03-12 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2013-3943

Severity

LOW

CVSS

3.5

EPSS

0.94%

Original NVD Description

Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the Display Name field in the Manage Profile.