Login Request a demo
DN
Product
Dnn.Platform
by dnnsoftware · last CVE Apr 17, 2026
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities18In the news0Timeline
Severity mix
Critical 2High 1Medium 15Low 0
Severity
All severities18Critical2High1Medium15Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Dnn.Platform to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-40306
6.5
0%
Apr 17
DNN has same HostGUID for all new installs
Affected: >= 10.0.0, < 10.2.2
CVE-2025-59535
6.5
0%
Sep 22
DotNetNuke.Core allows loading of unused themes on anonymous clients through query parameters
Affected: < 10.1.0
CVE-2025-59548
6.1
0%
Sep 23
DNN Vulnerable to Reflected Cross-Site Scripting (XSS) in CKEditor File Browser
Affected: < 10.1.0
CVE-2025-59821
6.1
0%
Sep 23
DNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profile
Affected: < 10.1.0
CVE-2026-24838
5.4
0%
Jan 27
DotNetNuke.Core Vulnerable to Stored XSS via Module Title
Affected: < 9.13.10; >= 10.0.0, < 10.2.0
CVE-2026-24837
5.4
0%
Jan 27
DotNetNuke.Core Vulnerable to Stored XSS in Module Deletion Confirmation Modal
Affected: >= 9.0.0, < 9.13.10; >= 10.0.0, < 10.2.0
CVE-2026-24836
5.4
0%
Jan 27
DotNetNuke.Core Vulnerable to Stored XSS in Scheduler LogNotes
Affected: >= 9.0.0, < 9.13.10; >= 10.0.0, < 10.2.0
CVE-2026-24833
5.4
0%
Jan 27
DotNetNuke.Core Vulnerable to Stored XSS in Module Description
Affected: < 9.13.10; >= 10.0.0, < 10.2.0
CVE-2025-64094
5.4
0%
Oct 28
DNN vulnerable to stored cross-site-scripting (XSS) via SVG upload
Affected: < 10.1.1
CVE-2025-59539
5.4
0%
Sep 23
DNN affected by Stored Cross-Site Scripting (XSS) in Profile Biography field
Affected: < 10.1.0
CVE-2025-59547
5.3
0%
Sep 23
DNN's CKEditor File Uploader functionality vulnerable through Unicode obfuscation
Affected: < 10.1.0
CVE-2026-24784
4.8
0%
Jan 27
DotNetNuke.Core has a potential XSS vulnerability in modules' header and footer
Affected: >= 9.0.0, < 9.13.10; >= 10.0.0, < 10.2.0
CVE-2025-59546
4.8
0%
Sep 23
DNN Vulnerable to Stored XSS Using Backend Admin Credentials
Affected: < 10.1.0
CVE-2026-40305
4.3
0%
Apr 17
DNN has Force Friend Request Acceptance
Affected: >= 6.0.0, < 10.2.2
CVE-2025-62802
4.3
0%
Oct 28
DNN CKEditor Provider allows unauthenticated upload out-of-the-box
Affected: < 10.1.1
Showing 15