DNN allows Stored Cross-Site Scripting (XSS) with svg files rendered inline

概要

参考情報

• dnnsoftware/Dnn.Platform security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2025-48378 · ADVISORY
• dnnsoftware/Dnn.Platform commit cfed83c · WEB
• dnnsoftware/Dnn.Platform · PACKAGE

DotNetNuke.Core のその他の脆弱性

• CVE-2026-40321高 8.0DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.2.2, a use…
• CVE-2026-40306中 6.5DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. All new installations of DNN 1…
• CVE-2026-40305中 4.3DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Starting in version 6.0.0 and …
• GHSA-fcpv-w245-r2q7低DotNetNuke.Core security code analysis rules triggered
• CVE-2026-24838中 5.4DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to versions 9.13.10 and …