https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-03T20:18:29.795644+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/bdu:2025-02484 bdu:2025-02484 2026-10-03T20:18:29.804367+00:00 bdu:2025-02484 https://db.gcve.eu/vuln/cve-2025-52485 CVE-2025-52485 — DNN.PLATFORM Allows Stored Cross-Site Scripting (XSS) in Activity Feed 2026-10-03T20:18:29.804448+00:00

Affected: dnnsoftware Dnn.Platform

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted request to inject scripts in the Activity Feed Attachments endpoint which will then render in the feed. This issue has been patched in version 10.0.1.