DotNetNuke.Core vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

GHSA-FCPV-W245-R2Q7LowDotNetNuke.Core: DotNetNuke.Core security code analysis rules triggered CVE-2026-40306MediumDotNetNuke.Core: DNN: Same HostGUID for all new installs CVE-2026-40305MediumDotNetNuke.Core: DNN: Force Friend Request Acceptance CVE-2026-40321HighDotNetNuke.Core: DotNetNuke.Core has stored cross-site-scripting (XSS) via SVG upload CVE-2026-24838CriticalDotNetNuke.Core: DotNetNuke.Core Vulnerable to Stored XSS via Module Title CVE-2026-24837HighDotNetNuke.Core: DotNetNuke.Core Vulnerable to Stored XSS in Module Deletion Confirmation Modal CVE-2026-24836HighDotNetNuke.Core: DotNetNuke.Core Vulnerable to Stored XSS in Scheduler LogNotes CVE-2026-24784MediumDotNetNuke.Core: DotNetNuke.Core has a potential XSS vulnerability in modules' header and footer CVE-2025-64094MediumDotNetNuke.Core: DNN vulnerable to stored cross-site-scripting (XSS) via SVG upload CVE-2025-59821MediumDotNetNuke.Core: DNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profile CVE-2025-59546LowDotNetNuke.Core: DNN Vulnerable to Stored XSS Using Backend Admin Credentials CVE-2025-59545CriticalDotNetNuke.Core: DNN Vulnerable to Stored Cross-Site Scripting (XSS) in the Prompt module CVE-2025-59539MediumDotNetNuke.Core: DNN affected by Stored Cross-Site Scripting (XSS) in Profile Biography field CVE-2025-59535MediumDotNetNuke.Core: DNN allows loading unused themes on anonymous clients through query parameters CVE-2025-48378MediumDotNetNuke.Core: DNN allows Stored Cross-Site Scripting (XSS) with svg files rendered inline CVE-2025-48377MediumDotNetNuke.Web: Reflected Cross-Site Scripting (XSS) in module actions in edit mode CVE-2025-32372MediumDotNetNuke.Core: DotNetNuke.Core Vulnerable to Server-Side Request Forgery (SSRF)CVE-2022-2922MediumDotNetNuke.Core: DNN vulnerable to Relative Path Traversal CVE-2020-5187HighDotNetNuke.Core: DNN Path Traversal via Zip Slip CVE-2020-5188MediumDotNetNuke.Core: DNN File Upload Vulnerability CVE-2020-5186MediumDotNetNuke.Core: DNN XSS Vulnerability CVE-2013-7335MediumDotNetNuke.Core: DotNetNuke (DNN) Open redirect vulnerability CVE-2013-4649MediumDotNetNuke.Core: DotNetNuke (DNN) Cross-site scripting (XSS) vulnerability via the __dnnVariable parameter CVE-2008-6540MediumDotNetNuke.Core: DotNetNuke Default Machine Key Exposure CVE-2018-14486MediumDotNetNuke.Core: DNN XSS Vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo