Cross Site Scripting Issue in DotNetNuke 3.x

if you facing the security issue in DNN 3.x

the only thing you can do is add an entry in web.config and run under MS.NET 2.0 runtime.

Add this entry in <system.web>

<httpCookies httpOnlyCookies=”true” requireSSL=”false” domain=”" />

Hope it helps.