Skip to content
OpenAdvisories

Package · NuGet

Dnn.Platform

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • Critical 10.0
    CVE-2025-64095 Public exploit EPSS 47%

    DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite

    DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 10.1.1, the default HTML editor provider allows unauthenticated file uploads and images can overwrite existing files. An unauthenticated use…

    dnnsoftware Dnn.Platform Dnn.Platform NuGet
  • Medium 4.3
    CVE-2025-62802

    DNN CKEditor Provider allows unauthenticated upload out-of-the-box

    DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 10.1.1, the out-of-box experience for HTML editing allows unauthenticated users to upload files. This opens a potential vector to other secu…

    dnnsoftware Dnn.Platform Dnn.Platform NuGet
  • High 8.6
    CVE-2025-52488 Public exploit EPSS 36%

    DNN.PLATFORM leaks NTLM hash via SMB Share Interaction with malicious user input

    DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted series of malicious interaction to potentially expose NTLM hashes to a th…

    dnnsoftware Dnn.Platform Dnn.Platform NuGet
  • High 8.8
    CVE-2025-52487

    DNN.PLATFORM possibly allows bypass of IP Filters

    DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 7.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted request or proxy to be created that could bypass the design of DNN Login …

    dnnsoftware Dnn.Platform Dnn.Platform NuGet
  • Medium 6.1
    CVE-2025-52486

    DNN.PLATFORM Allows Reflected Cross-Site Scripting (XSS) in some TokenReplace situations with SkinObjects

    DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows specially crafted content in URLs to be used with TokenReplace and not be properly sanitized …

    dnnsoftware Dnn.Platform Dnn.Platform NuGet
  • Medium 5.1
    CVE-2025-52485

    DNN.PLATFORM Allows Stored Cross-Site Scripting (XSS) in Activity Feed

    DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted request to inject scripts in the Activity Feed Attachments endpoint which…

    dnnsoftware Dnn.Platform Dnn.Platform NuGet