GHSA-w9pf-h6m6-v89h
DotNetNuke.Core Vulnerable to Stored XSS via Module Title
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| NuGet | DotNetNuke.Core | < 9.13.10 | 9.13.10 |
| NuGet | DotNetNuke.Core | >= 10.0.0, < 10.2.0 | 10.2.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
Module title supports richtext which could include scripts that would execute in certain scenarios.
References
External links from the advisory. They lead to third-party sites.
- https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-w9pf-h6m6-v89h
- https://nvd.nist.gov/vuln/detail/CVE-2026-24838
- https://github.com/dnnsoftware/Dnn.Platform/commit/4a4bcbcdf3cedbf702816f8168c4d51bf688f7f6
- https://github.com/dnnsoftware/Dnn.Platform
- https://github.com/dnnsoftware/Dnn.Platform/releases/tag/v10.2.0