This was in the email sent out by DNN Corp:

 -----------------------

Given the severity of these vulnerabilities, our primary recommendation is that you uninstall all DNN Go modules. If you are unable to do so, please proceed with the re-naming of files (below).

Navigate to the “DesktopModules” folder and look for folders named DNNGo_*

Within the folders, rename the following files:

Rename Resource_Service.* to Resource_Service.*.resources

Rename Resource_jQueryFileUpload.* to Resource_jQueryFileUpload.*.resources. This will prevent file upload capabilities in DNN Go modules.

Rename Index_Manager.* to Index_Manager.*.resources. This will break the editing of the DNN Go module’s content, but will help protect your site.

-------------------------

---

 

Thanks Timo!

Hello everyone,

This is Linda from DNNGo, I am really sorry for having not reply to everyone in time, and the convenience & confusions caused. Here, on behalf of DNNGo, I’d like to apologize for it. Since the incident happened, we have been working on solving issues, providing after-sale services and updates, as well as in communication with DNNCrop. At the same time, we have been doing our own routine work, it’s our mistake that we missed the attention from other aspects. Today, I will explain something to all of you.

At first, I’d like to show my great gratitude to everyone’s concern, attention, and great support. Your concern and support are the greatest motivation for our progress all the time. Thank you! Thank you so much!
Also, many thanks for DNN giving us this great platform and opportunity, so that we can provide DNN solutions for everyone.

The incident was caused by the security issues of modules, and it is a fact that there was security issue on our modules, and it is reasonable for DNNCrop to stop selling our products for temporary(to prevent everyone from any unnecessary loss). So please don’t question DNNCrop’s decision, this is what they should do and must do. Because once related to security issue, you cannot be too careful in this. So we will try our best to solve any possible security issue of our modules, and cooperate with DNNCrop's audit work actively.
If anyone still have any questions about our modules, you can turn to me for this(you can email me), and I will reply to you one by one. In addition, for the latest version of the modules, you can find them on our dnngo site, which is http://www.dnngo.net/FreeDownloads.aspx
Also, all of you are welcomed to supervise us. If you found any issue regarding our products, please feel free to let us know, and we promise we will try our best to have them addressed.

At last, we are actively communicatiing with DNNCrop now, and we believe that there will be a decision soon. So please don’t have any conjecture here, we believe that DNN will give all of us a satisfactory answer.

Again, thank you for supporting us! We believe DNN will become better and better.
(If there is anything not well said, sorry about this)

---

Our website: dnngo.net
E-mail account: dnnskindev@gmail.com
Skype: dnngo-linda