Dnn.Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:dnnsoftware:dnn.platform:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Dnnsoftware (d19eabab-274c-5698-b1fc-30e6e0de1824) |
|---|---|
| Product | Dnn.Platform (05897e6e-9cb3-526d-a5b9-00129a2bf840) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-40321 |
vulnerable | 2026-06-08 08:01:20.171949 |
DotNetNuke.Core has stored cross-site-scripting (XSS) via SVG upload
HIGH (8.1)
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.2.2, a user could upload a specially crafted SVG file that could include scripts that can target both authenticated and unauthenticated DNN users. The impact is increased if the scripts are run by a power user. Version 10.2.2 patches the issue.
Published: 2026-04-17T21:10:33.192Z
Updated: 2026-04-22T03:55:44.141Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40306 |
vulnerable | 2026-06-08 08:01:20.156393 |
DNN has same HostGUID for all new installs
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. All new installations of DNN 10.x.x - 10.2.1 have the same Host GUID. This does not affect upgrades from 9.x.x. Version 10.2.2 patches the issue.
Published: 2026-04-17T21:09:30.317Z
Updated: 2026-04-20T16:18:27.508Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40305 |
vulnerable | 2026-06-08 08:01:20.155048 |
DNN has Force Friend Request Acceptance
MEDIUM (4.3)
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Starting in version 6.0.0 and prior to version 10.2.2, in the friends feature, a user could craft a request that would force the acceptance of a friend request on another user. Version 10.2.2 patches the issue.
Published: 2026-04-17T21:06:09.237Z
Updated: 2026-04-20T13:36:06.644Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24838 |
vulnerable | 2026-06-08 07:51:18.224678 |
DotNetNuke.Core Vulnerable to Stored XSS via Module Title
CRITICAL (9.1)
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to versions 9.13.10 and 10.2.0, module title supports richtext which could include scripts that would execute in certain scenarios. Versions 9.13.10 and 10.2.0 contain a fix for the issue.
Published: 2026-01-27T23:58:33.340Z
Updated: 2026-01-28T15:03:27.676Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24837 |
vulnerable | 2026-06-08 07:51:18.224280 |
DotNetNuke.Core Vulnerable to Stored XSS in Module Deletion Confirmation Modal
HIGH (7.7)
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Starting in version 9.0.0 and prior to versions 9.13.10 and 10.2.0, a module friendly name could include scripts that will run during some module operations in the Persona Bar. Versions 9.13.10 and 10.2.0 contain a fix for the issue.
Published: 2026-01-27T23:53:23.875Z
Updated: 2026-01-28T21:03:06.368Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24836 |
vulnerable | 2026-06-08 07:51:18.223864 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24833 |
vulnerable | 2026-06-08 07:51:18.220286 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24784 |
vulnerable | 2026-06-08 07:51:18.170281 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-64095 |
vulnerable | 2026-06-08 07:39:17.983791 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-64094 |
vulnerable | 2026-06-08 07:39:17.983392 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62802 |
vulnerable | 2026-06-08 07:39:16.658824 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59821 |
vulnerable | 2026-06-08 07:35:23.219529 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59548 |
vulnerable | 2026-06-08 07:35:22.321782 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59547 |
vulnerable | 2026-06-08 07:35:22.321396 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59546 |
vulnerable | 2026-06-08 07:35:22.321036 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59545 |
vulnerable | 2026-06-08 07:35:22.320656 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59539 |
vulnerable | 2026-06-08 07:35:22.313698 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59535 |
vulnerable | 2026-06-08 07:35:22.310829 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52488 |
vulnerable | 2026-06-08 07:31:11.676097 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52487 |
vulnerable | 2026-06-08 07:31:11.675554 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52486 |
vulnerable | 2026-06-08 07:31:11.674848 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52485 |
vulnerable | 2026-06-08 07:31:11.673525 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48378 |
vulnerable | 2026-06-08 07:27:15.763250 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48377 |
vulnerable | 2026-06-08 07:27:15.762918 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48376 |
vulnerable | 2026-06-08 07:27:15.761839 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32374 |
vulnerable | 2026-06-08 07:18:59.499132 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32373 |
vulnerable | 2026-06-08 07:18:59.498746 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32372 |
vulnerable | 2026-06-08 07:18:59.498474 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32371 |
vulnerable | 2026-06-08 07:18:59.498085 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32036 |
vulnerable | 2026-06-08 07:18:58.983225 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32035 |
vulnerable | 2026-06-08 07:18:58.981913 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.