~ / search / GHSA-79m3-rvx2-3qq9

GHSA-79m3-rvx2-3qq9

Reflected Cross-Site Scripting (XSS) in module actions in edit mode

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-48377

Packages

EcosystemPackageAffectedFixed in
NuGet DotNetNuke.Web < 9.13.9 9.13.9
NuGet DotNetNuke.Core < 9.13.9 9.13.9

Details

As written in the advisory (Markdown source, shown as plain text).

A specially crafted URL may be constructed which can inject an XSS payload that is triggered by using some module actions.

References

External links from the advisory. They lead to third-party sites.