PT-2026-5039 · Dnn · Dnn

Valadas · Published 2026-01-27 · Updated 2026-01-28 · CVE-2026-24784

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions DNN (formerly DotNetNuke) versions 9.0.0 through 9.13.9 DNN (formerly DotNetNuke) versions 10.0.0 through 10.1.x

Description DNN (formerly DotNetNuke) is an open-source web content management platform. A content editor could inject scripts into module headers or footers, which would then execute for other users.

Recommendations Update to version 9.13.10 or later. Update to version 10.2.0 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-24784

GHSA-JJWG-4948-6WXP

Affected Products

Dnn

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24784.json · Exploit
• https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-jjwg-4948-6wxp · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-24784 · Security Note
• https://osv.dev/vulnerability/CVE-2026-24784 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-jjwg-4948-6wxp · Vendor Advisory
• https://github.com/dnnsoftware/Dnn.Platform · Note
• https://twitter.com/_cvereports/status/2016589811566395549 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2016338171638821225 · Twitter Post
• https://t.me/cveNotify/150059 · Telegram Post
• https://twitter.com/CVEnew/status/2016299195586535839 · Twitter Post