CVE-2018-10138: Catalooksupport .netstore

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

The CATALooK.netStore module through 7.2.8 for DNN (formerly DotNetNuke) allows XSS via the /ViewEditGoogleMaps.aspx PortalID or CATSkin parameter, or the /ImageViewer.aspx link or desc parameter.

Affected products

• Catalooksupport .netstore: up to and including 7.2.8

Published 2018-04-16. Last modified 2026-06-17.