Skip to content
OpenAdvisories

Vendor

dnnsoftware

34 known vulnerabilities.

Products

Dnn.Platform 32 DotNetNuke 1 dnnsoftware/dnn.platform 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-24838

    DotNetNuke.Core Vulnerable to Stored XSS via Module Title

    DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to versions 9.13.10 and 10.2.0, module title supports richtext which could include scripts that would execute in certain scenarios. Versions 9.…

    dnnsoftware Dnn.Platform DotNetNuke.Core NuGet
  • Critical 10.0
    CVE-2025-64095 Public exploit EPSS 47%

    DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite

    DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 10.1.1, the default HTML editor provider allows unauthenticated file uploads and images can overwrite existing files. An unauthenticated use…

    dnnsoftware Dnn.Platform Dnn.Platform NuGet
  • Critical 9.1
    CVE-2025-59545

    DNN Vulnerable to Stored Cross-Site Scripting (XSS) in the Prompt module

    DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, the Prompt module allows execution of commands that can return raw HTML. Malicious input, even if sanitized for display else…

    dnnsoftware Dnn.Platform DotNetNuke.Core NuGet