DotNetNuke.Core has stored cross-site-scripting (XSS) via SVG upload

概要

参考情報

• dnnsoftware/Dnn.Platform security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2026-40321 · ADVISORY
• dnnsoftware/Dnn.Platform · PACKAGE
• dnnsoftware/Dnn.Platform release v10.2.2 · WEB

DotNetNuke.Core のその他の脆弱性

• CVE-2026-40306中 6.5DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. All new installations of DNN 1…
• CVE-2026-40305中 4.3DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Starting in version 6.0.0 and …
• GHSA-fcpv-w245-r2q7低DotNetNuke.Core security code analysis rules triggered
• CVE-2026-24838中 5.4DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to versions 9.13.10 and …
• CVE-2026-24837中 5.4DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Starting in version 9.0.0 and …