Search for packages
| purl | pkg:nuget/DotNetNuke.Web@7.2.0.613 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-f55k-m678-vbfr
Aliases: CVE-2025-48377 GHSA-79m3-rvx2-3qq9 |
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 9.13.9, a specially crafted URL may be constructed which can inject an XSS payload that is triggered by using some module actions. Version 9.13.9 fixes the issue. |
Affected by 0 other vulnerabilities. |
|
VCID-gkac-w1q4-wfgw
Aliases: CVE-2022-2922 GHSA-9w72-2f23-57gm |
Relative Path Traversal in GitHub repository dnnsoftware/dnn.platform prior to 9.11.0. |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-12T20:02:14.654241+00:00 | GitLab Importer | Affected by | VCID-f55k-m678-vbfr | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/DotNetNuke.Web/CVE-2025-48377.yml | 38.6.0 |
| 2026-06-12T18:35:03.261745+00:00 | GitLab Importer | Affected by | VCID-gkac-w1q4-wfgw | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/DotNetNuke.Web/CVE-2022-2922.yml | 38.6.0 |