Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 36
Reset filtersDNN: Same HostGUID for all new installs
DNN: Force Friend Request Acceptance
DotNetNuke.Core has stored cross-site-scripting (XSS) via SVG upload
DotNetNuke.Core Vulnerable to Stored XSS via Module Title
DotNetNuke.Core Vulnerable to Stored XSS in Module Deletion Confirmation Modal
DotNetNuke.Core Vulnerable to Stored XSS in Scheduler LogNotes
DotNetNuke.Core has a potential XSS vulnerability in modules' header and footer
DNN vulnerable to stored cross-site-scripting (XSS) via SVG upload
DNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profile
DNN Vulnerable to Stored XSS Using Backend Admin Credentials
DNN Vulnerable to Stored Cross-Site Scripting (XSS) in the Prompt module
DNN affected by Stored Cross-Site Scripting (XSS) in Profile Biography field
DNN allows loading unused themes on anonymous clients through query parameters
DNN allows Stored Cross-Site Scripting (XSS) with svg files rendered inline
Reflected Cross-Site Scripting (XSS) in module actions in edit mode
DotNetNuke.Core Vulnerable to Server-Side Request Forgery (SSRF)
DNN vulnerable to Relative Path Traversal
DNN Path Traversal via Zip Slip
DNN File Upload Vulnerability
DNN XSS Vulnerability
DotNetNuke (DNN) Open redirect vulnerability
DotNetNuke (DNN) Cross-site scripting (XSS) vulnerability via the __dnnVariable parameter
DotNetNuke Default Machine Key Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.