PT-2026-5040 · Dnn · Dnn

Mojav3R · Publicado 2026-01-27 · Atualizado 2026-02-02 · CVE-2026-24833

Positive Technologies (AI Summary)

CVSS v3.1

7.6

Alta

Vetor base

AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DNN (formerly DotNetNuke) versions prior to 9.13.10 DNN (formerly DotNetNuke) versions prior to 10.2.0

Description DNN (formerly DotNetNuke) is an open-source web content management platform. Prior to versions 9.13.10 and 10.2.0, a module could be installed with rich text in its description field. This rich text could contain scripts that execute for users within the Persona Bar.

Recommendations Update to DNN version 9.13.10 or later. Update to DNN version 10.2.0 or later.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-24833

GHSA-9R3H-MPF8-25GJ

Produtos afetados

Dnn

Referências · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24833.json · Exploit
• https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-9r3h-mpf8-25gj · Aviso do Fabricante
• https://twitter.com/cracbot/status/2018278271348310507 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-24833 · Nota de Segurança
• https://t.me/cveNotify/150061 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2026-24833 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2016319522492358947 · Publicação no Twitter