Skip to main content

Vendor/product archive

dnnsoftware / dotnetnuke CVEs

Beta · best-effort

76 CVEs tagged to dnnsoftware / dotnetnuke5 Critical, 15 High, 52 Medium, 4 Low, 0 Unrated.

CVE-2026-40321

Published Apr 17, 2026

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.2.2, a user could upload a specially crafted SVG…

CVSS 8.0 · High
evidence mentions
2
Buzz score
16.0
Vendor/product tagsBeta · best-effort

CVE-2026-40306

Published Apr 17, 2026

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. All new installations of DNN 10.x.x - 10.2.1 have the same Host GUID.…

CVSS 6.9 · Medium
evidence mentions
2
Buzz score
16.0
Vendor/product tagsBeta · best-effort

CVE-2026-40305

Published Apr 17, 2026

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Starting in version 6.0.0 and prior to version 10.2.2, in the friends…

CVSS 4.3 · Medium
evidence mentions
2
Buzz score
16.0
Vendor/product tagsBeta · best-effort

CVE-2020-37103

Published Feb 3, 2026

DotNetNuke 9.5 contains a persistent cross-site scripting vulnerability that allows normal users to upload malicious XML files with executable scripts through journal tools. Attac…

CVSS 5.1 · Medium
Vendor/product tagsBeta · best-effort

CVE-2026-24838

Published Jan 28, 2026

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to versions 9.13.10 and 10.2.0, module title supports richtext…

CVSS 9.1 · Critical
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort

CVE-2026-24837

Published Jan 28, 2026

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Starting in version 9.0.0 and prior to versions 9.13.10 and 10.2.0, a…

CVSS 7.6 · High
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort

CVE-2026-24836

Published Jan 28, 2026

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Starting in version 9.0.0 and prior to versions 9.13.10 and 10.2.0, e…

CVSS 7.6 · High
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort

CVE-2026-24833

Published Jan 28, 2026

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to versions 9.13.10 and 10.2.0, a module could install with ric…

CVSS 7.6 · High
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort

CVE-2026-24784

Published Jan 28, 2026

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Starting in version 9.0.0 and prior to versions 9.13.10 and 10.2.0, a…

CVSS 6.8 · Medium
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort

CVE-2025-64095

Published Oct 28, 2025

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 10.1.1, the default HTML editor provider allows unauthentica…

CVSS 10.0 · Critical
Vendor/product tagsBeta · best-effort

CVE-2025-64094

Published Oct 28, 2025

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 10.1.1, sanitization of the content of uploaded SVG files w…

CVSS 6.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2025-62802

Published Oct 28, 2025

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 10.1.1, the out-of-box experience for HTML editing allows un…

CVSS 4.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2025-59821

Published Sep 23, 2025

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, DNN’s URL/path handling and template renderi…

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2025-59548

Published Sep 23, 2025

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, specially crafted URLs to the FileBrowser ar…

CVSS 5.9 · Medium
Vendor/product tagsBeta · best-effort

CVE-2025-59547

Published Sep 23, 2025

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, the CKEditor file upload endpoint has insuff…

CVSS 5.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2025-59546

Published Sep 23, 2025

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, administrators and content editors can set h…

CVSS 2.4 · Low
Vendor/product tagsBeta · best-effort

CVE-2025-59545

Published Sep 23, 2025

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, the Prompt module allows execution of comman…

CVSS 9.0 · Critical
Vendor/product tagsBeta · best-effort

CVE-2025-59539

Published Sep 23, 2025

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, when embedding information in the Biography…

CVSS 6.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2025-59535

Published Sep 22, 2025

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, arbitrary themes can be loaded through query…

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2025-52488

Published Jun 21, 2025

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially c…

CVSS 8.6 · High
Vendor/product tagsBeta · best-effort

CVE-2025-52487

Published Jun 21, 2025

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 7.0.0 to before 10.0.1, DNN.PLATFORM allows a specially c…

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort

CVE-2025-52486

Published Jun 21, 2025

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows specially cra…

CVSS 6.1 · Medium
Vendor/product tagsBeta · best-effort

CVE-2025-52485

Published Jun 21, 2025

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially c…

CVSS 5.1 · Medium
Vendor/product tagsBeta · best-effort

CVE-2025-48378

Published May 23, 2025

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 9.13.9, uploaded SVG files could contain scripts and…

CVSS 6.1 · Medium
Vendor/product tagsBeta · best-effort

CVE-2025-48377

Published May 23, 2025

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 9.13.9, a specially crafted URL may be constructed w…

CVSS 6.0 · Medium
Vendor/product tagsBeta · best-effort
Showing 1-25 of 76 CVEsPage 1 of 4