Security: dnnsoftware/Dnn.Platform
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Stored cross-site-scripting (XSS) via SVG uploadGHSA-ffq7-898w-9jc4 published
Apr 10, 2026 by valadasHigh -
Same HostGUID for all new installsGHSA-2rhw-gw3f-477j published
Apr 10, 2026 by valadasLow -
Security code analysis rules triggeredGHSA-fcpv-w245-r2q7 published
Apr 13, 2026 by valadasLow -
Force Friend Request AcceptanceGHSA-fpj4-9qhx-5m6m published
Apr 10, 2026 by valadasModerate -
Stored XSS via Module TitleGHSA-w9pf-h6m6-v89h published
Jan 27, 2026 by valadasCritical -
Stored XSS in Module Deletion Confirmation ModalGHSA-vm5q-8qww-h238 published
Jan 27, 2026 by valadasHigh -
Stored XSS in Scheduler LogNotesGHSA-2g5g-hcgh-q3rp published
Jan 27, 2026 by valadasHigh -
Stored XSS in Module DescriptionGHSA-9r3h-mpf8-25gj published
Jan 27, 2026 by valadasHigh -
Potential XSS vulnerability in modules' header and footerGHSA-jjwg-4948-6wxp published
Jan 27, 2026 by valadasModerate -
Insufficient Access Control - Image Upload allows for Site Content OverwriteGHSA-3m8r-w7xg-jqvw published
Oct 28, 2025 by valadasCritical