DNN allows Stored Cross-Site Scripting (XSS) with svg files rendered inline

Description

References

• dnnsoftware/Dnn.Platform security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2025-48378 · ADVISORY
• dnnsoftware/Dnn.Platform commit cfed83c · WEB
• dnnsoftware/Dnn.Platform · PACKAGE

DotNetNuke.Core의 다른 취약점

• CVE-2026-40321높음 8.0DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.2.2, a use…
• CVE-2026-40306보통 6.5DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. All new installations of DNN 1…
• CVE-2026-40305보통 4.3DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Starting in version 6.0.0 and …
• GHSA-fcpv-w245-r2q7낮음DotNetNuke.Core security code analysis rules triggered
• CVE-2026-24838보통 5.4DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to versions 9.13.10 and …