NuGet Package Vulnerabilities

Open in search

Vulnerabilities associated with DotNetNuke.Web.

Packages

Clear package

Showing 2 vulnerabilities on this page for DotNetNuke.Web

Signals CISA KEV Ransomware Nuclei
VulnerabilityTitle and contextCVSSEPSSPoCsSignals

Dnn.Platform vulnerable to Reflected Cross-Site Scripting (XSS) in module actions in edit mode

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 9.13.9, a specially crafted URL may be constructed which can inject an XSS payload that is triggered by using some module actions. Version 9.13.9 fixes the issue.

CWE-79May 23, 2025
CVSS6.0v4.0EPSS0.21%PoCs0SignalsSTIX

Relative Path Traversal in dnnsoftware/dnn.platform

Relative Path Traversal in GitHub repository dnnsoftware/dnn.platform prior to 9.11.0.

CWE-22CWE-23Sep 30, 2022
CVSS4.9v3.1EPSS1.07%PoCs0SignalsSTIX