CRITICAL10.0NuGet
GHSA-3m8r-w7xg-jqvw· CVE-2025-64095DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite
Modified: 10/29/2025
package
NuGet/DNN.PLATFORM
pkg:nuget/DNN.PLATFORM
HIGHNuGet
GHSA-fjhg-3mrh-mm7h· CVE-2025-52487DNN.PLATFORM possibly allows bypass of IP Filters
Modified: 6/27/2025
HIGH8.6NuGet
GHSA-mgfv-2362-jq96· CVE-2025-52488DNN.PLATFORM leaks NTLM hash via SMB Share Interaction with malicious user input
Modified: 6/27/2025
MEDIUM6.1NuGet
GHSA-pf4h-vrv6-cmvr· CVE-2025-52486DNN.PLATFORM Allows Reflected Cross-Site Scripting (XSS) in some TokenReplace situations with SkinObjects
Modified: 9/15/2025
MEDIUM5.4NuGet
GHSA-wwc9-wmm3-2pmf· CVE-2025-52485DNN.PLATFORM Allows Stored Cross-Site Scripting (XSS) in Activity Feed
Modified: 9/15/2025