DotNetNuke Persistent Cross-Site Scripting Vulnerability

A persistent cross-site scripting vulnerability has been identified in DotNetNuke (DNN) version 9.5. This vulnerability allows normal users to upload malicious XML files containing executable scripts via journal tools. The uploaded XML files can include scripts in the XHTML namespace, which are executed as arbitrary JavaScript in the browsers of users. This exploitation could potentially bypass Cross-Site Request Forgery (CSRF) protections and facilitate more harmful attacks.

Impact

Exploitation of this vulnerability allows for persistent cross-site scripting, where uploaded scripts are executed in the context of the user.

Reproduction

To reproduce this vulnerability, a normal user can upload an XML file through the journal tools in their profile. The XML file must include a script tag within the XHTML namespace. Once uploaded, the script will execute in the user's browser, demonstrating the cross-site scripting vulnerability.