CVE-2019-19392: Fordnn Usersexportimport

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

The forDNN.UsersExportImport module before 1.2.0 for DNN (formerly DotNetNuke) allows an unprivileged user to import (create) new users with Administrator privileges, as demonstrated by Roles="Administrators" in XML or CSV data.

Affected products

• Fordnn Usersexportimport: before 1.2.0 (fixed in 1.2.0)

Published 2020-01-21. Last modified 2026-06-17.