Dnn.Platform vulnerabilities

8 known vulnerabilities in Dnn.Platform from Dnnsoftware. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.0 High severity

  Dnn.Platform: Improper Neutralization of Alternate XSS Syntax

  CVE-2026-40321Apr 17, 2026DnnsoftwareEPSS 6.52%

  DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.2.2, a user could upload a specially crafted SVG file that could include scripts that can target both authenticated and unauthenti

• 9.8 Critical severity

  Dnn.Platform: Unrestricted Upload of File with Dangerous Type

  CVE-2025-64095Oct 28, 2025DnnsoftwareEPSS 47%

  DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 10.1.1, the default HTML editor provider allows unauthenticated file uploads and images can overwrite existing files. An unauthenticated user

• 9.0 Critical severity

  Dnn.Platform: Improper Neutralization of Input During Web Page Generation

  CVE-2025-59545Sep 23, 2025Dnnsoftware

  DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, the Prompt module allows execution of commands that can return raw HTML. Malicious input, even if sanitized for display elsew

• 8.6 High severity

  Dnn.Platform: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2025-52488Jun 21, 2025DnnsoftwareEPSS 35.8%

  DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted series of malicious interaction to potentially expose NTLM hashes to a thi

• 7.5 High severity

  Dnn.Platform: Incorrect Authorization

  CVE-2025-52487Jun 21, 2025Dnnsoftware

  DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 7.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted request or proxy to be created that could bypass the design of DNN Login I

• 7.5 High severity

  Dnn.Platform: Allocation of Resources Without Limits or Throttling

  CVE-2025-32374Apr 9, 2025Dnnsoftware

  DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Possible denial of service with specially crafted information in the public registration form. This vulnerability is fixed in 9.13.8.

• 7.5 High severity

  Dnn.Platform: Server-Side Request Forgery

  CVE-2025-32372Apr 9, 2025Dnnsoftware

  DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. A bypass has been identified for the previously known vulnerability CVE-2017-0929, allowing unauthenticated attackers to execute arbitrary GET request

• 7.5 High severity

  Dnn.Platform: Insufficient Type Distinction

  CVE-2025-32035Apr 8, 2025Dnnsoftware

  DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 9.13.2, when uploading files (e.g. when uploading assets), the file extension is checked to see if it's an allowed file type but the actual c