Skip to content
OpenAdvisories

Product · dnnsoftware

Dnn.Platform

32 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.4
    CVE-2025-59546

    DNN Vulnerable to Stored XSS Using Backend Admin Credentials

    DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, administrators and content editors can set html in module titles that could include javascript which could be used for XSS b…

    dnnsoftware Dnn.Platform DotNetNuke.Core NuGet
  • Low 3.5
    CVE-2025-48376

    Dnn.Platform's Site Import could use an external source with a crafted request

    DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 9.13.9, a malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Version 9.1…

    dnnsoftware Dnn.Platform DotNetNuke.SiteExportImport NuGet
  • Low 2.6
    CVE-2025-32035

    DNN does not check the contents of a file when uploading files

    DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 9.13.2, when uploading files (e.g. when uploading assets), the file extension is checked to see if it's an allowed file type but the actual …

    dnnsoftware Dnn.Platform