Skip to content
OpenAdvisories

Package · NuGet

Dnn.Platform

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-62802

    DNN CKEditor Provider allows unauthenticated upload out-of-the-box

    DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 10.1.1, the out-of-box experience for HTML editing allows unauthenticated users to upload files. This opens a potential vector to other secu…

    dnnsoftware Dnn.Platform Dnn.Platform NuGet
  • Medium 6.1
    CVE-2025-52486

    DNN.PLATFORM Allows Reflected Cross-Site Scripting (XSS) in some TokenReplace situations with SkinObjects

    DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows specially crafted content in URLs to be used with TokenReplace and not be properly sanitized …

    dnnsoftware Dnn.Platform Dnn.Platform NuGet
  • Medium 5.1
    CVE-2025-52485

    DNN.PLATFORM Allows Stored Cross-Site Scripting (XSS) in Activity Feed

    DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted request to inject scripts in the Activity Feed Attachments endpoint which…

    dnnsoftware Dnn.Platform Dnn.Platform NuGet