DNN Cross-Site Scripting Vulnerabilities

DNN also known as DotNetNuke is an open-source content management system CMS developed by the American company DNN, supported by Microsoft and based on the ASP.NET platform. This system features easy installation, scalability, and rich functionality. Versions of DNN prior to 9.13.10 and 10.2.0...

CVE-2026-24837

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Starting in version 9.0.0 and prior to versions 9.13.10 and 10.2.0, a module friendly name could include scripts that will run during some module operations in the Persona Bar. Versions 9.13....

CVE-2021-31858

DotNetNuke DNN 9.9.1 CMS is vulnerable to a Stored Cross-Site Scripting vulnerability in the user profile biography section which allows remote authenticated users to inject arbitrary code via a crafted payload...

CVE-2008-6399

Unspecified vulnerability in DotNetNuke 4.5.2 through 4.9 allows remote attackers to "add additional roles to their user account" via unknown attack vectors...

CVE-2019-12562

Stored Cross-Site Scripting in DotNetNuke DNN Version before 9.4.0 allows remote attackers to store and embed the malicious script into the admin notification page. The exploit could be used to perfom any action with admin privileges such as managing content, adding users, uploading backdoors to...

PT-2025-44221

Name of the Vulnerable Software and Affected Versions DNN formerly DotNetNuke versions prior to 10.1.1 Description DNN formerly DotNetNuke is an open-source web content management platform. The default HTML editor provider allows unauthenticated file uploads, enabling attackers to overwrite...

EUVD-2008-6606

Malware in sbrugna...

EUVD-2008-6369

Malware in sbrugna...

EUVD-2008-7060

Malware in sbrugna...

EUVD-2008-7061

Malware in sbrugna...

EUVD-2013-3875

Malware in sbrugna...

EUVD-2010-4482

Malware in sbrugna...

EUVD-2008-7059

Malware in sbrugna...

EUVD-2004-2317

Malware in sbrugna...

EUVD-2009-4080

Malware in sbrugna...

EUVD-2004-2315

Malware in sbrugna...

EUVD-2008-6508

Malware in sbrugna...

EUVD-2012-1068

Malware in sbrugna...

EUVD-2012-1074

Malware in sbrugna...

EUVD-2022-4574

Malicious code in bioql PyPI...