Cross-Site Scripting Vulnerability in DNN Web CMS
CVE-2025-48377

6MEDIUM

Key Information:

Vendor

Dnnsoftware

Status
Dnn.platform
Vendor
CVE Published:
23 May 2025

What is CVE-2025-48377?

DNN Platform, a popular open-source web content management system, is susceptible to a Cross-Site Scripting (XSS) vulnerability prior to version 9.13.9. Malicious users can exploit this flaw by crafting specific URLs that inject harmful XSS payloads, which may be executed through certain module actions. The issue has been addressed in version 9.13.9, highlighting the importance of updating to the latest version to mitigate potential security risks.

Affected Version(s)

Dnn.Platform < 9.13.9

References

https://github.com/dnnsoftware/Dnn.Platform/security/advi...
x_refsource_CONFIRM
https://github.com/dnnsoftware/Dnn.Platform/commit/351b16...
x_refsource_MISC

CVSS V4

Score:
6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.