Vulnerabilidades en dnnsoftware
34 resultadosAnálisis Vexday
DNN Software apresenta 32 vulnerabilidades catalogadas, com 3 classificadas como críticas, mas nenhuma sob exploração ativa atualmente. A fraqueza dominante é injeção de script (CWE-79), típica de plataformas web; a ausência de divulgações recentes sugere que o risco está estabilizado, embora as vulnerabilidades críticas existentes demandem remediação conforme patches sejam disponibilizados.
CVE-2025-52486MEDIUMDNN.PLATFORM Allows Reflected Cross-Site Scripting (XSS) in some TokenReplace situations with SkinObjectsEPSS 0.2%CVE-2025-48377MEDIUMDnn.Platform vulnerable to Reflected Cross-Site Scripting (XSS) in module actions in edit modeEPSS 0.2%CVE-2025-59821MEDIUMDNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profileEPSS 0.2%CVE-2026-24838CRITICALDotNetNuke.Core Vulnerable to Stored XSS via Module TitleEPSS 0.2%CVE-2025-64094MEDIUMDNN vulnerable to stored cross-site-scripting (XSS) via SVG uploadEPSS 0.2%CVE-2026-40305MEDIUMDNN has Force Friend Request AcceptanceEPSS 0.2%CVE-2025-52485MEDIUMDNN.PLATFORM Allows Stored Cross-Site Scripting (XSS) in Activity FeedEPSS 0.2%CVE-2026-40306MEDIUMDNN has same HostGUID for all new installsEPSS 0.2%CVE-2025-59548MEDIUMDNN Vulnerable to Reflected Cross-Site Scripting (XSS) in CKEditor File BrowserEPSS 0.2%CVE-2026-24833HIGHDotNetNuke.Core Vulnerable to Stored XSS in Module DescriptionEPSS 0.2%CVE-2025-59546LOWDNN Vulnerable to Stored XSS Using Backend Admin CredentialsEPSS 0.2%CVE-2025-32035LOWDNN does not check the contents of a file when uploading filesEPSS 0.2%CVE-2025-59539MEDIUMDNN affected by Stored Cross-Site Scripting (XSS) in Profile Biography fieldEPSS 0.2%CVE-2026-24784MEDIUMDotNetNuke.Core has a potential XSS vulnerability in modules' header and footerEPSS 0.2%