Advisories · Technology
dnnsoftware Dnn.Platform.
Every CVE that names dnnsoftware Dnn.Platform among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.7 High
DotNetNuke.Core Vulnerable to Stored XSS in Module Description
- dnnsoftware Dnn.Platform
- Cross-site scripting (XSS)
- CVSS 5.9 Medium
DNN Vulnerable to Reflected Cross-Site Scripting (XSS) in CKEditor File Browser
- dnnsoftware Dnn.Platform
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
DNN's CKEditor File Uploader functionality vulnerable through Unicode obfuscation
- dnnsoftware Dnn.Platform
- CWE-176
- CVSS 5.9 Medium
Possible Denial of Service (DoS) in DNN.PLATFORM registration
- dnnsoftware Dnn.Platform
- Denial of service
- CVSS 6.5 Medium
DNN allows a registered user to enumerate and access files they should not have access to
- dnnsoftware Dnn.Platform
- Broken access control
- CVSS 4.3 Medium
Unexpected external content may be displayed in DNN ImageHandler
- dnnsoftware Dnn.Platform
- CWE-451
- CVSS 4.2 Medium
DNN allows the possibility of bypassing Captcha
- dnnsoftware Dnn.Platform
- CWE-804
- CVSS 2.6 Low
DNN does not check the contents of a file when uploading files
- dnnsoftware Dnn.Platform
- CWE-351
- CVSS 6.5 Medium
DNN CMS Server-Side Request Forgery (SSRF)
- DNNSoftware DNN Platform
- Server-side request forgery (SSRF)