Skip to content
OpenAdvisories

Vendor

dnnsoftware

34 known vulnerabilities.

Products

Dnn.Platform 32 DotNetNuke 1 dnnsoftware/dnn.platform 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.1
    CVE-2026-40321

    DotNetNuke.Core has stored cross-site-scripting (XSS) via SVG upload

    DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.2.2, a user could upload a specially crafted SVG file that could include scripts that can target both authenticated and unauthent…

    dnnsoftware Dnn.Platform DotNetNuke.Core NuGet
  • High 7.7
    CVE-2026-24837

    DotNetNuke.Core Vulnerable to Stored XSS in Module Deletion Confirmation Modal

    DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Starting in version 9.0.0 and prior to versions 9.13.10 and 10.2.0, a module friendly name could include scripts that will run during some module ope…

    dnnsoftware Dnn.Platform DotNetNuke.Core NuGet
  • High 7.7
    CVE-2026-24836

    DotNetNuke.Core Vulnerable to Stored XSS in Scheduler LogNotes

    DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Starting in version 9.0.0 and prior to versions 9.13.10 and 10.2.0, extensions could write richtext in log notes which can include scripts that would…

    dnnsoftware Dnn.Platform DotNetNuke.Core NuGet
  • High 7.7
    CVE-2026-24833

    DotNetNuke.Core Vulnerable to Stored XSS in Module Description

    DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to versions 9.13.10 and 10.2.0, a module could install with richtext in its description field which could contain scripts that will run for use…

    dnnsoftware Dnn.Platform
  • High 8.6
    CVE-2025-52488 Public exploit EPSS 36%

    DNN.PLATFORM leaks NTLM hash via SMB Share Interaction with malicious user input

    DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted series of malicious interaction to potentially expose NTLM hashes to a th…

    dnnsoftware Dnn.Platform Dnn.Platform NuGet
  • High 8.8
    CVE-2025-52487

    DNN.PLATFORM possibly allows bypass of IP Filters

    DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 7.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted request or proxy to be created that could bypass the design of DNN Login …

    dnnsoftware Dnn.Platform Dnn.Platform NuGet