CVE-2025-52485
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted request to inject scripts in the Activity Feed Attachments endpoint which will then render in the feed. This issue has been patched in version 10.0.1.
Vendor
Product
CWE
Yayın Tarihi
2025-06-21 03:15:23
Güncelleme
2025-09-15 15:41:56
Source Identifier
security-advisories@github.com
KEV Date Added
-