Login Request a demo
DN
Vendor
Dnnsoftware
3 products with CVEs on record
108
CVEs
3
On KEV
0
New 30D
Products
DO
DotNetNuke
Dnnsoftware
9.8
76 CVEs3 on KEV0 new
DN
Dnn.Platform
dnnsoftware
9.8
31 CVEs0 on KEV0 new
DN
dnnsoftware/dnn.platform
dnnsoftware
4.9
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-40321
DN
Dnn.Platform
dnnsoftware
8.0
6%
Apr 17DotNetNuke.Core has stored cross-site-scripting (XSS) via SVG upload
CVE-2026-40306
DN
Dnn.Platform
dnnsoftware
6.5
0%
Apr 17DNN has same HostGUID for all new installs
CVE-2026-40305
DN
Dnn.Platform
dnnsoftware
4.3
0%
Apr 17DNN has Force Friend Request Acceptance
CVE-2020-37103
DO
DotNetNuke
Dnnsoftware
5.4
0%
Feb 3DotNetNuke 9.5 - Persistent Cross-Site Scripting
CVE-2026-24838
DN
Dnn.Platform
dnnsoftware
5.4
0%
Jan 27DotNetNuke.Core Vulnerable to Stored XSS via Module Title
CVE-2026-24837
DN
Dnn.Platform
dnnsoftware
5.4
0%
Jan 27DotNetNuke.Core Vulnerable to Stored XSS in Module Deletion Confirmation Modal
CVE-2026-24836
DN
Dnn.Platform
dnnsoftware
5.4
0%
Jan 27DotNetNuke.Core Vulnerable to Stored XSS in Scheduler LogNotes
CVE-2026-24833
DN
Dnn.Platform
dnnsoftware
5.4
0%
Jan 27DotNetNuke.Core Vulnerable to Stored XSS in Module Description
CVE-2026-24784
DN
Dnn.Platform
dnnsoftware
4.8
0%
Jan 27DotNetNuke.Core has a potential XSS vulnerability in modules' header and footer
CVE-2025-64095
DN
Dnn.Platform
dnnsoftware
9.8
47%
Oct 28DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite
CVE-2025-64094
DN
Dnn.Platform
dnnsoftware
5.4
0%
Oct 28DNN vulnerable to stored cross-site-scripting (XSS) via SVG upload
CVE-2025-62802
DN
Dnn.Platform
dnnsoftware
4.3
0%
Oct 28DNN CKEditor Provider allows unauthenticated upload out-of-the-box
CVE-2025-59548
DN
Dnn.Platform
dnnsoftware
6.1
0%
Sep 23DNN Vulnerable to Reflected Cross-Site Scripting (XSS) in CKEditor File Browser
CVE-2025-59547
DN
Dnn.Platform
dnnsoftware
5.3
0%
Sep 23DNN's CKEditor File Uploader functionality vulnerable through Unicode obfuscation
CVE-2025-59821
DN
Dnn.Platform
dnnsoftware
6.1
0%
Sep 23DNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profile
CVE-2025-59546
DN
Dnn.Platform
dnnsoftware
4.8
0%
Sep 23DNN Vulnerable to Stored XSS Using Backend Admin Credentials
CVE-2025-59545
DN
Dnn.Platform
dnnsoftware
9.0
0%
Sep 23DNN Vulnerable to Stored Cross-Site Scripting (XSS) in the Prompt module
CVE-2025-59539
DN
Dnn.Platform
dnnsoftware
5.4
0%
Sep 23DNN affected by Stored Cross-Site Scripting (XSS) in Profile Biography field
CVE-2025-59535
DN
Dnn.Platform
dnnsoftware
6.5
0%
Sep 22DotNetNuke.Core allows loading of unused themes on anonymous clients through query parameters
CVE-2025-52488
DN
Dnn.Platform
dnnsoftware
8.6
36%
Jun 21DNN.PLATFORM leaks NTLM hash via SMB Share Interaction with malicious user input
CVE-2025-52487
DN
Dnn.Platform
dnnsoftware
7.5
0%
Jun 21DNN.PLATFORM possibly allows bypass of IP Filters
CVE-2025-52486
DN
Dnn.Platform
dnnsoftware
6.1
0%
Jun 21DNN.PLATFORM Allows Reflected Cross-Site Scripting (XSS) in some TokenReplace situations with SkinObjects
CVE-2025-52485
DN
Dnn.Platform
dnnsoftware
5.4
0%
Jun 21DNN.PLATFORM Allows Stored Cross-Site Scripting (XSS) in Activity Feed
CVE-2025-48377
DN
Dnn.Platform
dnnsoftware
5.4
0%
May 23Dnn.Platform vulnerable to Reflected Cross-Site Scripting (XSS) in module actions in edit mode
CVE-2025-48378
DN
Dnn.Platform
dnnsoftware
5.4
0%
May 23Dnn.Platform vulnerable to Stored Cross-Site Scripting (XSS) with svg files rendered inline
CVE-2025-48376
DN
Dnn.Platform
dnnsoftware
2.4
0%
May 23Dnn.Platform's Site Import could use an external source with a crafted request
CVE-2025-32374
DN
Dnn.Platform
dnnsoftware
7.5
0%
Apr 9Possible Denial of Service (DoS) in DNN.PLATFORM registration
CVE-2025-32373
DN
Dnn.Platform
dnnsoftware
6.5
0%
Apr 9DNN allows a registered user to enumerate and access files they should not have access to
CVE-2025-32372
DN
Dnn.Platform
dnnsoftware
7.5
0%
Apr 9Server-Side Request Forgery (SSRF) in DotNetNuke.Core
CVE-2025-32371
DN
Dnn.Platform
dnnsoftware
4.3
0%
Apr 9Unexpected external content may be displayed in DNN ImageHandler
CVE-2025-32036
DN
Dnn.Platform
dnnsoftware
6.5
0%
Apr 8DNN allows the possibility of bypassing Captcha
CVE-2025-32035
DN
Dnn.Platform
dnnsoftware
7.5
0%
Apr 8DNN does not check the contents of a file when uploading files
CVE-2022-47053
DO
Dotnetnuke
Dnnsoftware
5.4
0%
Apr 12An arbitrary file upload vulnerability in the Digital Assets Manager module of DNN Corp DotNetNuke v7.0.0 to v9.10.2 allows attackers to execute arbitrary code via a crafted SVG…
CVE-2022-2922
DN
dnnsoftware/dnn.platform
dnnsoftware
4.9
1%
Sep 30Relative Path Traversal in dnnsoftware/dnn.platform
CVE-2021-31858
DO
Dotnetnuke
Dnnsoftware
5.4
1%
Jul 20DotNetNuke (DNN) 9.9.1 CMS is vulnerable to a Stored Cross-Site Scripting vulnerability in the user profile biography section which allows remote authenticated users to inject…
CVE-2021-40186
DO
Dotnetnuke
Dnnsoftware
7.5
1%
Jun 2The AppCheck research team identified a Server-Side Request Forgery (SSRF) vulnerability within the DNN CMS platform, formerly known as DotNetNuke
CVE-2020-11585
DO
Dotnetnuke
Dnnsoftware
4.3
1%
Apr 6There is an information disclosure issue in DNN (formerly DotNetNuke) 9.5 within the built-in Activity-Feed/Messaging/Userid/ Message Center module
CVE-2020-5188
DO
Dotnetnuke
Dnnsoftware
6.5
2%
Feb 24DNN (formerly DotNetNuke) through 9.4.4 has Insecure Permissions
CVE-2020-5187
DO
Dotnetnuke
Dnnsoftware
8.8
2%
Feb 24DNN (formerly DotNetNuke) through 9.4.4 allows Path Traversal (issue 2 of 2)
CVE-2020-5186
DO
Dotnetnuke
Dnnsoftware
5.4
1%
Feb 24DNN (formerly DotNetNuke) through 9.4.4 allows XSS (issue 1 of 2)
CVE-2019-12562
DO
Dotnetnuke
Dnnsoftware
6.1
6%
Sep 26Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0 allows remote attackers to store and embed the malicious script into the admin notification page
CVE-2018-18326
DO
Dotnetnuke
Dnnsoftware
7.5
54%
Jul 3DNN (aka DotNetNuke) 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than expected entropy
CVE-2018-15812
DO
Dotnetnuke
Dnnsoftware
7.5
47%
Jul 3DNN (aka DotNetNuke) 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy
CVE-2018-18325
In wildKEV
DO
Dotnetnuke
Dnnsoftware
7.5
74%
Jul 3DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability
CVE-2018-15811
In wildKEV
DO
Dotnetnuke
Dnnsoftware
7.5
76%
Jul 3DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters
CVE-2018-14486
DO
Dotnetnuke
Dnnsoftware
6.1
1%
Mar 17DNN (formerly DotNetNuke) 9.1.1 allows cross-site scripting (XSS) via XML
CVE-2017-0929
DO
Dotnetnuke
Dnnsoftware
7.5
13%
Jul 3DNN (aka DotNetNuke) before 9.2.0 suffers from a Server-Side Request Forgery (SSRF) vulnerability in the DnnImageHandler class
CVE-2017-9822
RansomwareIn wildKEV
DO
Dotnetnuke
Dnnsoftware
8.8
95%
Jul 20DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites."
CVE-2015-2794
DO
Dotnetnuke
Dnnsoftware
9.8
75%
Feb 6The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to…
CVE-2016-7119
DO
Dotnetnuke
Dnnsoftware
5.4
1%
Aug 31Cross-site scripting (XSS) vulnerability in the user-profile biography section in DotNetNuke (DNN) before 8.0.1 allows remote authenticated users to inject arbitrary web script or…
CVE-2015-1566
DO
Dotnetnuke
Dnnsoftware
–
2%
Feb 9Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
CVE-2013-7335
DO
Dotnetnuke
Dnnsoftware
–
1%
Mar 12Open redirect vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via…
CVE-2013-4649
DO
Dotnetnuke
Dnnsoftware
–
2%
Mar 12Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to inject arbitrary web script or HTML via the __dnnVariable…
CVE-2013-3943
DO
Dotnetnuke
Dnnsoftware
–
1%
Mar 12Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote authenticated users to inject arbitrary web script or HTML via vectors…
CVE-2012-1036
DO
Dotnetnuke
Dnnsoftware
–
1%
Apr 11Cross-site scripting (XSS) vulnerability in the telerik HTML editor in DotNetNuke before 5.6.4 and 6.x before 6.1.0 allows remote attackers to inject arbitrary web script or HTML…
CVE-2012-1030
DO
Dotnetnuke
Dnnsoftware
–
1%
Apr 11Cross-site scripting (XSS) vulnerability in DotNetNuke 6.x through 6.0.2 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted URL containing…
CVE-2010-4514
DO
Dotnetnuke
Dnnsoftware
–
1%
Dec 9Cross-site scripting (XSS) vulnerability in Install/InstallWizard.aspx in DotNetNuke 5.05.01 and 5.06.00 allows remote attackers to inject arbitrary web script or HTML via the…
CVE-2009-4110
DO
Dotnetnuke
Dnnsoftware
–
2%
Nov 29Cross-site scripting (XSS) vulnerability in the search functionality in DotNetNuke 4.8 through 5.1.4 allows remote attackers to inject arbitrary web script or HTML via search…
CVE-2009-4109
DO
Dotnetnuke
Dnnsoftware
–
1%
Nov 29The install wizard in DotNetNuke 4.0 through 5.1.4 does not prevent anonymous users from accessing functionality related to determination of the need for an upgrade, which allows…
CVE-2008-7102
DO
Dotnetnuke
Dnnsoftware
–
1%
Aug 27DotNetNuke 2.0 through 4.8.4 allows remote attackers to load .ascx files instead of skin files, and possibly access privileged functionality, via unknown vectors related to…