PT-2025-39200 · Dotnetnuke · Dnn

Bdukes · Published 2025-02-18 · Updated 2025-09-29 · CVE-2025-59548

Positive Technologies (AI Summary)

CVSS v2.0

8.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:P/A:P

Name of the Vulnerable Software and Affected Versions DNN (formerly DotNetNuke) versions prior to 10.1.0

Description DNN (formerly DotNetNuke) is an open-source web content management platform. Versions prior to 10.1.0 have a javascript injection issue related to specially crafted URLs to the FileBrowser. Clicking these URLs can affect users. The issue impacts any unsuspecting user.

Recommendations Update to version 10.1.0 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2025-02482

CVE-2025-59548

GHSA-5FJ9-542V-W4RQ

Affected Products

Dnn

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/59xxx/CVE-2025-59548.json · Exploit
• https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-5fj9-542v-w4rq · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02482 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-59548 · Security Note
• https://osv.dev/vulnerability/CVE-2025-59548 · Vendor Advisory
• https://github.com/dnnsoftware/Dnn.Platform/releases/tag/v10.1.0 · Note
• https://t.me/CVEtracker/33189 · Telegram Post
• https://twitter.com/CVEnew/status/1970621789522063724 · Twitter Post
• https://t.me/cveNotify/136819 · Telegram Post