CVE-2026-24838
DotNetNuke.Core Vulnerable to Stored XSS via Module Title
Summary
DotNetNuke.Core Vulnerable to Stored XSS via Module Title
Original description
The description as published by the source.
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to versions 9.13.10 and 10.2.0, module title supports richtext which could include scripts that would execute in certain scenarios. Versions 9.13.10 and 10.2.0 contain a fix for the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov