HIGH7.6NuGet
GHSA-2g5g-hcgh-q3rp· CVE-2026-24836DotNetNuke.Core Vulnerable to Stored XSS in Scheduler LogNotes
Modified: 2/3/2026
package
NuGet/DotNetNuke.Core
pkg:nuget/DotNetNuke.Core
CRITICAL9.0NuGet
GHSA-2qxc-mf4x-wr29· CVE-2025-59545DNN Vulnerable to Stored Cross-Site Scripting (XSS) in the Prompt module
Modified: 9/23/2025
MEDIUM6.5NuGet
GHSA-2rhw-gw3f-477j· CVE-2026-40306DNN: Same HostGUID for all new installs
Modified: 5/5/2026
MEDIUM6.5NuGet
GHSA-3f7v-qx94-666m· CVE-2025-32372DotNetNuke.Core Vulnerable to Server-Side Request Forgery (SSRF)
Modified: 4/9/2025
HIGH8.8NuGet
GHSA-4qf5-7xc2-wqpg· CVE-2020-5187DNN Path Traversal via Zip Slip
Modified: 2/16/2024
MEDIUM5.4NuGet
GHSA-5c66-x4wm-rjfx· CVE-2016-7119Cross-site scripting (XSS) vulnerability in the user-profile biography section in DotNetNuke (DNN)
Modified: 11/8/2023
MEDIUM6.1NuGet
GHSA-5whq-j5qg-wjvp· CVE-2019-12562Stored Cross-Site Scripting vulnerability in admin component of DotNetNuke
Modified: 2/16/2024
MEDIUMNuGet
GHSA-79m3-rvx2-3qq9· CVE-2025-48377Reflected Cross-Site Scripting (XSS) in module actions in edit mode
Modified: 5/23/2025
MEDIUM6.3NuGet
GHSA-7rcc-q6rq-jpcm· CVE-2025-59539DNN affected by Stored Cross-Site Scripting (XSS) in Profile Biography field
Modified: 9/23/2025
MEDIUM5.4NuGet
GHSA-9phr-h5mx-4fp6· CVE-2020-5186DNN XSS Vulnerability
Modified: 2/16/2024
MEDIUM4.9NuGet
GHSA-9w72-2f23-57gm· CVE-2022-2922DNN vulnerable to Relative Path Traversal
Modified: 11/8/2023
LOWNuGet
GHSA-fcpv-w245-r2q7DotNetNuke.Core security code analysis rules triggered
Modified: 4/14/2026
HIGH8.0NuGet
GHSA-ffq7-898w-9jc4· CVE-2026-40321DotNetNuke.Core has stored cross-site-scripting (XSS) via SVG upload
Modified: 5/5/2026
MEDIUM4.3NuGet
GHSA-fpj4-9qhx-5m6m· CVE-2026-40305DNN: Force Friend Request Acceptance
Modified: 5/5/2026
HIGH7.5NuGet
GHSA-g8j6-m4p7-5rfq· CVE-2017-0929High severity vulnerability that affects DotNetNuke.Core
Modified: 11/8/2023
LOW2.4NuGet
GHSA-gj8m-5492-q98h· CVE-2025-59546DNN Vulnerable to Stored XSS Using Backend Admin Credentials
Modified: 9/23/2025
MEDIUMNuGet
GHSA-grw3-hjjm-5cjm· CVE-2008-6540DotNetNuke Default Machine Key Exposure
Modified: 11/8/2023
HIGH7.5NuGet
GHSA-h595-8pw6-5q6v· CVE-2018-15811Inadequate Encryption Strength in DotNetNuke
Modified: 10/22/2025
MEDIUM6.4NuGet
GHSA-hmvq-8p83-cq52· CVE-2025-64094DNN vulnerable to stored cross-site-scripting (XSS) via SVG upload
Modified: 10/29/2025
HIGH7.5NuGet
GHSA-j3g9-6fx5-gjv7· CVE-2018-18325Inadequate Encryption Strength in DotNetNuke
Modified: 10/22/2025
MEDIUM6.5NuGet
GHSA-jc4g-c8ww-5738· CVE-2025-59821DNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profile
Modified: 9/23/2025
MEDIUM6.9NuGet
GHSA-jjwg-4948-6wxp· CVE-2026-24784DotNetNuke.Core has a potential XSS vulnerability in modules' header and footer
Modified: 2/4/2026
MEDIUMNuGet
GHSA-m4hf-fxcg-cp34· CVE-2025-48378DNN allows Stored Cross-Site Scripting (XSS) with svg files rendered inline
Modified: 5/23/2025
MEDIUM6.1NuGet
GHSA-m6w9-8cxc-jff7· CVE-2018-14486DNN XSS Vulnerability
Modified: 2/16/2024
MEDIUM4.0NuGet
GHSA-mj48-f959-pqph· CVE-2013-7335DotNetNuke (DNN) Open redirect vulnerability
Modified: 2/16/2024
HIGH7.5NuGet
GHSA-pf46-gqg9-j3v3· CVE-2018-15812Insufficient Entropy in DotNetNuke
Modified: 11/8/2023
MEDIUMNuGet
GHSA-rvrj-j7cc-236p· CVE-2013-4649DotNetNuke (DNN) Cross-site scripting (XSS) vulnerability via the __dnnVariable parameter
Modified: 12/5/2024
MEDIUMNuGet
GHSA-v76m-f5cx-8rg4· CVE-2015-1566Moderate severity vulnerability that affects DotNetNuke.Core
Modified: 12/2/2024
MEDIUM6.5NuGet
GHSA-vjcm-j85r-7p68· CVE-2020-5188DNN File Upload Vulnerability
Modified: 2/16/2024
HIGH7.6NuGet
GHSA-vm5q-8qww-h238· CVE-2026-24837DotNetNuke.Core Vulnerable to Stored XSS in Module Deletion Confirmation Modal
Modified: 2/3/2026
CRITICAL9.1NuGet
GHSA-w9pf-h6m6-v89h· CVE-2026-24838DotNetNuke.Core Vulnerable to Stored XSS via Module Title
Modified: 2/3/2026
MEDIUM6.5NuGet
GHSA-wq2j-w9pm-7x2p· CVE-2025-59535DNN allows loading unused themes on anonymous clients through query parameters
Modified: 9/22/2025
HIGH8.8NuGet
GHSA-x2rg-fmcv-crq5· CVE-2017-9822DNN (aka DotNetNuke) has Remote Code Execution via a cookie
Modified: 11/8/2023
CRITICAL9.8NuGet
GHSA-x8f7-h444-97w4· CVE-2015-2794The installation wizard in DotNetNuke (DNN) allows privilege escalation
Modified: 12/2/2024
MEDIUMNuGet
GHSA-xr96-7ccp-pg5c· CVE-2007-0660DotNetNuke Vulnerable to XSS in Pass-Through Values
Modified: 11/8/2023
HIGH7.5NuGet
GHSA-xx3h-j3cx-8qfj· CVE-2018-18326Insufficient Entropy in DotNetNuke
Modified: 11/8/2023