CVE Tools
Track your stack

Dnn.platform

31 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Dnn.platform, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Dnn.platform CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Dnn.platform CVEs per month
MonthCVEs
2024-110
2024-120
2025-010
2025-020
2025-030
2025-046
2025-053
2025-064
2025-070
2025-080
2025-097
2025-103
2025-110
2025-120
2026-015
2026-020
2026-030
2026-043
2026-050
2026-060
2026-070
2026-080
2026-090
2026-100

Severity

How the 31 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical310%
  • High619%
  • Medium1961%
  • Low310%

Latest CVEs

The 15 most recently published vulnerabilities affecting Dnn.platform.

  1. CVE-2026-40321DotNetNuke.Core has stored cross-site-scripting (XSS) via SVG upload8.0
  2. CVE-2026-40306DNN has same HostGUID for all new installs6.5
  3. CVE-2026-40305DNN has Force Friend Request Acceptance4.3
  4. CVE-2026-24838DotNetNuke.Core Vulnerable to Stored XSS via Module Title9.1
  5. CVE-2026-24837DotNetNuke.Core Vulnerable to Stored XSS in Module Deletion Confirmation Modal7.6
  6. CVE-2026-24836DotNetNuke.Core Vulnerable to Stored XSS in Scheduler LogNotes7.6
  7. CVE-2026-24833DotNetNuke.Core Vulnerable to Stored XSS in Module Description7.6
  8. CVE-2026-24784DotNetNuke.Core has a potential XSS vulnerability in modules' header and footer6.8
  9. CVE-2025-64095DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite10.0
  10. CVE-2025-64094DNN vulnerable to stored cross-site-scripting (XSS) via SVG upload6.4
  11. CVE-2025-62802DNN CKEditor Provider allows unauthenticated upload out-of-the-box4.3
  12. CVE-2025-59548DNN Vulnerable to Reflected Cross-Site Scripting (XSS) in CKEditor File Browser6.1
  13. CVE-2025-59547DNN's CKEditor File Uploader functionality vulnerable through Unicode obfuscation5.3
  14. CVE-2025-59821DNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profile6.5
  15. CVE-2025-59546DNN Vulnerable to Stored XSS Using Backend Admin Credentials2.4

Product grouping is registry-driven, with AI assist and human review. How it works