CVE-2026-24838
1 advisory.
NuGet/DotNetNuke.Core CVE-2026-24838: critical 9.1
DotNetNuke.Core Vulnerable to Stored XSS via Module Title
Action: Upgrade DotNetNuke.Core to 9.13.10 (9.x) or 10.2.0 (10.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.13.10 | - |
| 10.0.0 | 10.2.0 | - |
Fixed versions
| 9.13.10 | 10.2.0 |
Sources
- osv: GHSA-w9pf-h6m6-v89h
- https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-w9pf-h6m6-v89h
- https://nvd.nist.gov/vuln/detail/CVE-2026-24838
- https://github.com/dnnsoftware/Dnn.Platform/commit/4a4bcbcdf3cedbf702816f8168c4d51bf688f7f6
- https://github.com/dnnsoftware/Dnn.Platform
- https://github.com/dnnsoftware/Dnn.Platform/releases/tag/v10.2.0
CVE-2026-24838 · published · modified · JSON