Vulnerabilities in DNNSoftware

34 results
Vexday analysis

DNN Software apresenta perfil de risco baixo com apenas 1 vulnerabilidade registrada na base e nenhuma sob exploração ativa. A fraqueza identificada (CWE-918 - Server-Side Request Forgery) é de natureza moderada, e a ausência de divulgações recentes indica que o risco não está em evolução imediata.

CVE-2025-52486MEDIUMDNN.PLATFORM Allows Reflected Cross-Site Scripting (XSS) in some TokenReplace situations with SkinObjectsEPSS 0.2%CVE-2025-48377MEDIUMDnn.Platform vulnerable to Reflected Cross-Site Scripting (XSS) in module actions in edit modeEPSS 0.2%CVE-2025-59821MEDIUMDNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profileEPSS 0.2%CVE-2026-24838CRITICALDotNetNuke.Core Vulnerable to Stored XSS via Module TitleEPSS 0.2%CVE-2025-64094MEDIUMDNN vulnerable to stored cross-site-scripting (XSS) via SVG uploadEPSS 0.2%CVE-2026-40305MEDIUMDNN has Force Friend Request AcceptanceEPSS 0.2%CVE-2025-52485MEDIUMDNN.PLATFORM Allows Stored Cross-Site Scripting (XSS) in Activity FeedEPSS 0.2%CVE-2026-40306MEDIUMDNN has same HostGUID for all new installsEPSS 0.2%CVE-2025-59548MEDIUMDNN Vulnerable to Reflected Cross-Site Scripting (XSS) in CKEditor File BrowserEPSS 0.2%CVE-2026-24833HIGHDotNetNuke.Core Vulnerable to Stored XSS in Module DescriptionEPSS 0.2%CVE-2025-59546LOWDNN Vulnerable to Stored XSS Using Backend Admin CredentialsEPSS 0.2%CVE-2025-32035LOWDNN does not check the contents of a file when uploading filesEPSS 0.2%CVE-2025-59539MEDIUMDNN affected by Stored Cross-Site Scripting (XSS) in Profile Biography fieldEPSS 0.2%CVE-2026-24784MEDIUMDotNetNuke.Core has a potential XSS vulnerability in modules' header and footerEPSS 0.2%