Dnnsoftware - vulnerabilities (CVEs)

76 CVEs in 4 products, 0 in the last 30 days, newest from 2026-04-17.

Products

• Dotnetnuke - 76 CVEs
• Dnn.platform - 31 CVEs
• Dnn Platform - 1 CVEs
• Dnnsoftwarednn.platform - 1 CVEs

Newest CVEs of Dnnsoftware

• CVE-2026-40305 - CVSS 4.3 (medium), 2026-04-17: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Starting in version 6.0.0 and prior to version…
• CVE-2026-40321 - CVSS 8.1 (high), 2026-04-17: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.2.2, a user could upload a…
• CVE-2026-40306 - CVSS 6.9 (medium), 2026-04-17: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. All new installations of DNN 10.x.x - 10.2.1…
• CVE-2020-37103 - CVSS 6.4 (medium), 2026-02-03: DotNetNuke 9.5 contains a persistent cross-site scripting vulnerability that allows normal users to upload malicious XML files with executable scripts through…
• CVE-2026-24838 - CVSS 9.1 (critical), 2026-01-28: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to versions 9.13.10 and 10.2.0, module…
• CVE-2026-24837 - CVSS 7.7 (high), 2026-01-28: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Starting in version 9.0.0 and prior to versions…
• CVE-2026-24836 - CVSS 7.7 (high), 2026-01-28: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Starting in version 9.0.0 and prior to versions…
• CVE-2026-24833 - CVSS 7.7 (high), 2026-01-28: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to versions 9.13.10 and 10.2.0, a module…
• CVE-2026-24784 - CVSS 6.8 (medium), 2026-01-28: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Starting in version 9.0.0 and prior to versions…
• CVE-2025-64094 - CVSS 6.4 (medium), 2025-10-28: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 10.1.1, sanitization of the content of…
• CVE-2025-62802 - CVSS 4.3 (medium), 2025-10-28: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 10.1.1, the out-of-box experience for…
• CVE-2025-64095 - CVSS 10 (critical), 2025-10-28: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 10.1.1, the default HTML editor…
• CVE-2025-59821 - CVSS 6.5 (medium), 2025-09-23: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, DNN’s URL/path handling…
• CVE-2025-59548 - CVSS 6.1 (medium), 2025-09-23: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, specially crafted URLs…
• CVE-2025-59547 - CVSS 5.3 (medium), 2025-09-23: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, the CKEditor file…
• CVE-2025-59546 - CVSS 4.8 (medium), 2025-09-23: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, administrators and…
• CVE-2025-59545 - CVSS 9.1 (critical), 2025-09-23: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, the Prompt module…
• CVE-2025-59539 - CVSS 6.3 (medium), 2025-09-23: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, when embedding…
• CVE-2025-59535 - CVSS 6.5 (medium), 2025-09-22: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, arbitrary themes can be…
• CVE-2025-52488 - CVSS 8.6 (high), 2025-06-21: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM…
• CVE-2025-52487 - CVSS 8.8 (high), 2025-06-21: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 7.0.0 to before 10.0.1, DNN.PLATFORM…
• CVE-2025-52486 - CVSS 6.1 (medium), 2025-06-21: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM…
• CVE-2025-52485 - CVSS 5.4 (medium), 2025-06-21: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM…
• CVE-2025-48378 - CVSS 6.1 (medium), 2025-05-23: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 9.13.9, uploaded SVG files…
• CVE-2025-48377 - CVSS 6 (medium), 2025-05-23: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 9.13.9, a specially crafted URL…
• CVE-2025-48376 - CVSS 3.5 (low), 2025-05-23: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 9.13.9, a malicious SuperUser…
• CVE-2025-32374 - CVSS 7.5 (high), 2025-04-09: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Possible denial of service with specially…
• CVE-2025-32373 - CVSS 6.5 (medium), 2025-04-09: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In limited configurations, registered users may…
• CVE-2025-32372 - CVSS 7.5 (high), 2025-04-09: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. A bypass has been identified for the previously…
• CVE-2025-32371 - CVSS 4.3 (medium), 2025-04-09: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. A url could be crafted to the DNN ImageHandler…