CVE-2026-24837
DotNetNuke.Core Vulnerable to Stored XSS in Module Deletion Confirmation Modal
Summary
DotNetNuke.Core Vulnerable to Stored XSS in Module Deletion Confirmation Modal
Original description
The description as published by the source.
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Starting in version 9.0.0 and prior to versions 9.13.10 and 10.2.0, a module friendly name could include scripts that will run during some module operations in the Persona Bar. Versions 9.13.10 and 10.2.0 contain a fix for the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov