CVE-2019-12562

Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0 allows remote attackers to store and embed the malicious script into the admin notification page. The exploit could be used to perfom any action with admin privileges such as managing content, adding users, uploading backdoors to the server, etc. Successful exploitation occurs when an admin user visits a notification page with stored cross-site scripting.

• CWE-79

• http://packetstormsecurity.com/files/154673/DotNetNuke-Cross-Site-Scripting.html
• https://mayaseven.com/cve-2019-12562-stored-cross-site-scripting-in-dotnetnuke-dnn-version-v9-3-2/Exploit, Third Party Advisory
• http://packetstormsecurity.com/files/154673/DotNetNuke-Cross-Site-Scripting.html
• https://mayaseven.com/cve-2019-12562-stored-cross-site-scripting-in-dotnetnuke-dnn-version-v9-3-2/Exploit, Third Party Advisory

Published

Sep 26, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-12551In SweetScape 010 Editor 9.0.1, improper validation of argum…
• CVE-2019-12552In SweetScape 010 Editor 9.0.1, an integer overflow during t…
• CVE-2019-12553In SweetScape 010 Editor 9.0.1, improper validation of argum…
• CVE-2019-12554In SweetScape 010 Editor 9.0.1, improper validation of argum…
• CVE-2019-12555In SweetScape 010 Editor 9.0.1, improper validation of argum…
• CVE-2019-1256An elevation of privilege vulnerability exists in Windows wh…7.8
• CVE-2019-12564In DouCo DouPHP v1.5 Release 20190516, remote attackers can …
• CVE-2019-12566The WP Statistics plugin through 12.6.5 for Wordpress has st…
• CVE-2019-12567Stack-based overflow vulnerability in the logMess function i…9.8
• CVE-2019-12568Stack-based overflow vulnerability in the logMess function i…9.8
• CVE-2019-12569A vulnerability in Viber before 10.7.0 for Desktop (Windows)…
• CVE-2019-1257A remote code execution vulnerability exists in Microsoft Sh…8.8