CVE-2019-12562

This repository contains a functional exploit for CVE-2019-12562, a stored XSS vulnerability in DotNetNuke (DNN) before version 9.4.0. The exploit adds a superuser account by injecting malicious JavaScript into the Display Name field during registration, which executes when an admin views the notification page.

This exploit leverages a stored XSS vulnerability in DotNetNuke (DNN) before version 9.4.0 to add a superuser account. It injects a malicious script into the Display Name field during registration, which executes when an admin views the notification page.