DNN allows Stored Cross-Site Scripting (XSS) with svg files rendered inline

Mô tả

Tham khảo

• dnnsoftware/Dnn.Platform security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2025-48378 · ADVISORY
• dnnsoftware/Dnn.Platform commit cfed83c · WEB
• dnnsoftware/Dnn.Platform · PACKAGE

Lỗ hổng khác của DotNetNuke.Core

• CVE-2026-40321CAO 8.0DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.2.2, a use…
• CVE-2026-40306TRUNG BÌNH 6.5DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. All new installations of DNN 1…
• CVE-2026-40305TRUNG BÌNH 4.3DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Starting in version 6.0.0 and …
• GHSA-fcpv-w245-r2q7THẤPDotNetNuke.Core security code analysis rules triggered
• CVE-2026-24838TRUNG BÌNH 5.4DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to versions 9.13.10 and …