dnnsoftware Vulnerabilities and Affected Products
Vulnerabilities associated with DotNetNuke.
Products
Clear product- Dnn.Platform31 vulnerabilities
- DotNetNuke (DNN)3 vulnerabilities
- DNN Platform1 vulnerability
- dnnsoftware/dnn.platform1 vulnerability
- DotNetNuke1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2020-37103MEDIUM | DotNetNuke 9.5 - Persistent Cross-Site ScriptingDotNetNuke 9.5 contains a persistent cross-site scripting vulnerability that allows normal users to upload malicious XML files with executable scripts through journal tools. Attackers can upload XML files with XHTML namespace scripts to execute arbitrary JavaScript in users' browsers, potentially bypassing CSRF protections and performing more damaging attacks. CWE-79Feb 3, 2026 | CVSS5.1v4.0 | EPSS0.291% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |