Skip to content
CVE PROGRAM SOURCE RECORD6.0 Medium

CVE-2025-48377

Dnn.Platform vulnerable to Reflected Cross-Site Scripting (XSS) in module actions in edit mode

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 9.13.9, a specially crafted URL may be constructed which can inject an XSS payload that is triggered by using some module actions. Version 9.13.9 fixes the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

dnnsoftware Dnn.Platform

  • < 9.13.9affected

References