Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-38yt-swkk-nfbm
Vulnerability ID VCID-38yt-swkk-nfbm
Aliases CVE-2015-1566
GHSA-v76m-f5cx-8rg4
Summary Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00253 https://api.first.org/data/v1/epss?cve=CVE-2015-1566
generic_textual MODERATE http://secunia.com/advisories/62832
generic_textual MODERATE https://github.com/advisories/GHSA-v76m-f5cx-8rg4
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2015-1566
generic_textual MODERATE http://www.dnnsoftware.com/platform/manage/security-center
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2015-1566
http://secunia.com/advisories/62832
https://github.com/advisories/GHSA-v76m-f5cx-8rg4
http://www.dnnsoftware.com/platform/manage/security-center
CVE-2015-1566 https://nvd.nist.gov/vuln/detail/CVE-2015-1566
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.48852
EPSS Score 0.00253
Published At June 4, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-02T04:36:21.105267+00:00 GitLab Importer Import https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/DotNetNuke.Core/CVE-2015-1566.yml 38.6.0