CVE-2025-52485

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted request to inject scripts in the Activity Feed Attachments endpoint which will then render in the feed. This issue...

CVE-2025-52485

creationtimestamp| type| source ---|---|--- 2025-06-21 03:45:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19105 2025-06-21 06:00:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls3ut5q76e2o...

CVE-2025-52485 DNN.PLATFORM Allows Stored Cross-Site Scripting (XSS) in Activity Feed

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted request to inject scripts in the Activity Feed Attachments endpoint which will then render in the feed. This issue...

Dotnetnuke < 10.0.1 Stored Cross-Site Scripting (XSS) in Activity Feed (CVE-2025-52485)

According to its self-reported version, the instance of Dotnetnuke running on the remote web server is prior to 10.0.1. It is, therefore, affected by a vulnerability. - DNN.PLATFORM Allows Stored Cross-Site Scripting XSS in Activity Feed CVE-2025-52485 Note that Nessus has not tested for this iss...