CVE-2025-59546

Description

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, administrators and content editors can set html in module titles that could include javascript which could be used for XSS based attacks. This issue has been patched in version 10.1.0.

Risk Information

Base Score

4.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS Score

Exploitation Probability

0.023

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2025-59535,CVE-2025-59821,CVE-2025-59546,CVE-2025-59545,CVE-2025-59539 are fixed in Nuget - DotNetNuke.Core 10.1.0	Windows
Vulnerabilities CVE-2025-59535,CVE-2025-59821,CVE-2025-59546,CVE-2025-59545,CVE-2025-59539 are fixed in Nuget - DotNetNuke.Core for Linux 10.1.0	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234