CVE-2025-48377
Dnn.Platform vulnerable to Reflected Cross-Site Scripting (XSS) in module actions in edit mode
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Dnn.Platform vulnerable to Reflected Cross-Site Scripting (XSS) in module actions in edit mode
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 9.13.9, a specially crafted URL may be constructed which can inject an XSS payload that is triggered by using some module actions. Version 9.13.9 fixes the issue.
Reserved 2025-05-19 | Published 2025-05-23 | Updated 2025-05-23 | Assigner GitHub_MCWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
github.com/...atform/security/advisories/GHSA-79m3-rvx2-3qq9
github.com/...ommit/351b166492ad4b6509c273dc83211d52238e31a7
Support options
