{"action":"Upgrade DotNetNuke.Core to 10.1.0 or later.","affected":[{"fixed":"10.1.0","introduced":"0"}],"component":"DotNetNuke.Core","cve_ids":["CVE-2025-59535"],"ecosystem":"NuGet","epss":0.00428,"exploited":false,"fixed_versions":["10.1.0"],"ghsa_id":"GHSA-wq2j-w9pm-7x2p","id":"tcs_01M5N948JYBR1JW6CWD3C5GVX0","modified_at":"2025-09-22T22:39:24.418469Z","published_at":"2025-09-22T21:10:20Z","references":["https://osv.dev/vulnerability/GHSA-wq2j-w9pm-7x2p","https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-wq2j-w9pm-7x2p","https://nvd.nist.gov/vuln/detail/CVE-2025-59535","https://github.com/dnnsoftware/Dnn.Platform/commit/72f30f69fd2214d77f6c2577dfcca495a24caf5c","https://dnncommunity.org/?SkinSrc=%5BG%5Dskins%2Fxcillion%2Fhome&ContainerSrc=%5BG%5DContainers%2FXcillion%2FNoTitle","https://github.com/dnnsoftware/Dnn.Platform","https://github.com/dnnsoftware/Dnn.Platform/blob/develop/DNN%20Platform/Library/UI/Skins/Skin.cs#L305"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-wq2j-w9pm-7x2p","url":"https://osv.dev/vulnerability/GHSA-wq2j-w9pm-7x2p"}],"summary":"DNN allows loading unused themes on anonymous clients through query parameters"}