CVE-2025-48377

creationtimestamp| type| source ---|---|--- 2025-05-23 15:44:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17408 2025-05-23 17:43:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpu6kzfber2m 2025-05-23 23:34:44+00:00| seen|...

CVE-2025-48377 Dnn.Platform vulnerable to Reflected Cross-Site Scripting (XSS) in module actions in edit mode

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to version 9.13.9, a specially crafted URL may be constructed which can inject an XSS payload that is triggered by using some module actions. Version 9.13.9 fixes the issue...

CVE-2025-48377 Dnn.Platform vulnerable to Reflected Cross-Site Scripting (XSS) in module actions in edit mode

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to version 9.13.9, a specially crafted URL may be constructed which can inject an XSS payload that is triggered by using some module actions. Version 9.13.9 fixes the issue...