PT-2026-5042 · Dotnetnuke · Dnn

Mojav3R · CVE-2026-24837 · Published 2026-01-27 · Updated 2026-02-02

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DNN (formerly DotNetNuke) versions 9.0.0 through 9.13.9 DNN (formerly DotNetNuke) versions 10.0.0 through 10.1.x

Description DNN (formerly DotNetNuke) is an open-source web content management platform. A module friendly name can include scripts that execute during certain module operations within the Persona Bar.

Recommendations Update to version 9.13.10 or later. Update to version 10.2.0 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-24837

GHSA-VM5Q-8QWW-H238

Affected Products

Dnn

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24837.json · Exploit
• https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-vm5q-8qww-h238 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-vm5q-8qww-h238 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-24837 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-24837 · Security Note
• https://github.com/dnnsoftware/Dnn.Platform · Note
• https://t.me/cveNotify/150063 · Telegram Post
• https://twitter.com/cracbot/status/2018278275718815908 · Twitter Post
• https://twitter.com/CVEnew/status/2016319520554549716 · Twitter Post