dnnsoftware has 9 CVEs on record. The median CVSS is 6.3 (medium), with 1 rated critical. None have a confirmed exploitation report. The most common weakness class is CWE-79 (6).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.3
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Weakness classes
Products
- dotnetnuke 9
Worst active — by depth score
CVE-2025-59545Critical· 9.0DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem50CVE-2025-59821Medium· 6.5DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem36CVE-2025-59535Medium· 6.5DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem36CVE-2025-64094Medium· 6.4DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem35CVE-2025-59539Medium· 6.3DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem35
dnnsoftware vulnerabilities
CVEs affecting dnnsoftware, newest first. Open any entry for full detail, references, and exploit status.
9 CVEsRSS
CVE-2025-64094Medium· 6.4DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 10.1.1, sanitization of the content of uploaded SVG files was not covering all possible XSS scenarios. This vulnerabi…
CVE-2025-62802Medium· 4.3DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 10.1.1, the out-of-box experience for HTML editing allows unauthenticated users to upload files. This opens a potentia…
CVE-2025-59821Medium· 6.5DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, DNN’s URL/path handling and template rendering can allow specially crafted input to be reflected into …
CVE-2025-59548Medium· 6.1DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, specially crafted URLs to the FileBrowser are vulnerable to javascript injection, affecting any unsusp…
CVE-2025-59547Medium· 5.3DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, the CKEditor file upload endpoint has insufficient sanitization for filenames allowing probing network…
CVE-2025-59546Low· 2.4DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, administrators and content editors can set html in module titles that could include javascript which c…
CVE-2025-59545Critical· 9.0DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, the Prompt module allows execution of commands that can return raw HTML. Malicious input, even if sani…
CVE-2025-59539Medium· 6.3DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, when embedding information in the Biography field, even if that field is not rich-text, users could in…
CVE-2025-59535Medium· 6.5DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, arbitrary themes can be loaded through query parameters. If an installed theme had a vulnerability, ev…