Dotnetnuke.core

This hub aggregates every CVE we track for Dotnetnuke.core, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Dotnetnuke.core.

• CVE-2026-24838DotNetNuke.Core Vulnerable to Stored XSS via Module Title9.1Jan 27, 2026
• CVE-2026-24837DotNetNuke.Core Vulnerable to Stored XSS in Module Deletion Confirmation Modal7.6Jan 27, 2026
• CVE-2026-24836DotNetNuke.Core Vulnerable to Stored XSS in Scheduler LogNotes7.6Jan 27, 2026
• CVE-2026-24784DotNetNuke.Core has a potential XSS vulnerability in modules' header and footer6.8Jan 27, 2026
• CVE-2025-64094DNN vulnerable to stored cross-site-scripting (XSS) via SVG upload6.4Oct 28, 2025
• CVE-2025-59821DNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profile6.5Sep 23, 2025
• CVE-2025-59546DNN Vulnerable to Stored XSS Using Backend Admin Credentials2.4Sep 23, 2025
• CVE-2025-59545DNN Vulnerable to Stored Cross-Site Scripting (XSS) in the Prompt module9.0Sep 23, 2025
• CVE-2025-59539DNN affected by Stored Cross-Site Scripting (XSS) in Profile Biography field6.3Sep 23, 2025
• CVE-2025-59535DotNetNuke.Core allows loading of unused themes on anonymous clients through query parameters6.5Sep 22, 2025
• CVE-2025-48377Dnn.Platform vulnerable to Reflected Cross-Site Scripting (XSS) in module actions in edit mode5.4May 23, 2025
• CVE-2025-48378Dnn.Platform vulnerable to Stored Cross-Site Scripting (XSS) with svg files rendered inline5.4May 23, 2025
• CVE-2025-32372Server-Side Request Forgery (SSRF) in DotNetNuke.Core6.5Apr 9, 2025
• CVE-2022-2922Relative Path Traversal in dnnsoftware/dnn.platform4.9Sep 30, 2022
• CVE-2020-5186DNN (formerly DotNetNuke) through 9.4.4 allows XSS (issue 1 of 2).5.4Feb 24, 2020