Skip to content
OpenAdvisories

Package · NuGet

DotNetNuke.Core

36 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-24838

    DotNetNuke.Core Vulnerable to Stored XSS via Module Title

    DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to versions 9.13.10 and 10.2.0, module title supports richtext which could include scripts that would execute in certain scenarios. Versions 9.…

    dnnsoftware Dnn.Platform DotNetNuke.Core NuGet
  • Critical 9.1
    CVE-2025-59545

    DNN Vulnerable to Stored Cross-Site Scripting (XSS) in the Prompt module

    DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, the Prompt module allows execution of commands that can return raw HTML. Malicious input, even if sanitized for display else…

    dnnsoftware Dnn.Platform DotNetNuke.Core NuGet
  • Critical 9.8
    CVE-2015-2794 Public exploit Scanner template EPSS 75%

    The installation wizard in DotNetNuke (DNN) allows privilege escalation

    The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx.

    DotNetNuke.Core NuGet