NuGet/DotNetNuke.Core CVE-2025-48378: medium 5.4, EPSS 0.29%
DNN allows Stored Cross-Site Scripting (XSS) with svg files rendered inline
Action: Upgrade DotNetNuke.Core to 9.13.9 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.13.9 | - |
Fixed versions
| 9.13.9 |
Sources
- osv: GHSA-m4hf-fxcg-cp34
- nvd: CVE-2025-48378
- https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-m4hf-fxcg-cp34
- https://github.com/dnnsoftware/Dnn.Platform/commit/cfed83c291d5e5072b2fa70924a8b7c35b1cdf9e
- https://github.com/dnnsoftware/Dnn.Platform
CVE-2025-48378 · published · modified · JSON