Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2026-24838

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to versions 9.13.10 and 10.2.0, module title supports richtext which could include scripts that would execute in certain scenarios. Versions 9.13.10 and 10.2.0 contain a fix for the issue.

VectorNETWORK

PublishedJan 28, 2026, 01:16

Published Bysecurity-advisories@github.com

Base Score

Score5.4

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

DotNetNuke.Core(NuGet)09.13.10N/A

DotNetNuke.Core(NuGet)10.0.010.2.0N/A

References

https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-w9pf-h6m6-v89h

Weakness Type

CWE-79

CVSS Metrics

Base Score

5.4

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK