CVE-2026-24837
1 advisory.
NuGet/DotNetNuke.Core CVE-2026-24837: high 7.6, EPSS 0.28%
DotNetNuke.Core Vulnerable to Stored XSS in Module Deletion Confirmation Modal
Action: Upgrade DotNetNuke.Core to 10.2.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.0.0 | - | 9.13.9 |
| 10.0.0 | 10.2.0 | - |
Fixed versions
| 10.2.0 |
Sources
- osv: GHSA-vm5q-8qww-h238
- https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-vm5q-8qww-h238
- https://nvd.nist.gov/vuln/detail/CVE-2026-24837
- https://github.com/dnnsoftware/Dnn.Platform
CVE-2026-24837 · published · modified · JSON