Skip to main content
cve.nowby Sazabi
← NuGet
NuGetPackage

DNN.PLATFORM

6 known vulnerabilities (1 critical, 2 high, 3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6 · 1 critical, 2 high, 3 medium
Registry
NuGet

Advisories 6

  • CVE-2025-64095Critical 10.0

    DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite

    Affected: fixed in 10.1.1.

  • CVE-2025-62802Medium 4.3

    DNN CKEditor Provider allows unauthenticated upload out-of-the-box

    Affected: fixed in 10.1.1.

  • DNN.PLATFORM leaks NTLM hash via SMB Share Interaction with malicious user input

    Affected: from 6.0.0, fixed in 10.0.1.

  • DNN.PLATFORM possibly allows bypass of IP Filters

    Affected: from 7.0.0, fixed in 10.0.1.

  • CVE-2025-52486Medium 6.1

    DNN.PLATFORM Allows Reflected Cross-Site Scripting (XSS) in some TokenReplace situations with SkinObjects

    Affected: from 6.0.0, fixed in 10.0.1.

  • CVE-2025-52485Medium 5.1

    DNN.PLATFORM Allows Stored Cross-Site Scripting (XSS) in Activity Feed

    Affected: from 6.0.0, fixed in 10.0.1.