https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T05:36:55.213080+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/bdu:2025-02485 bdu:2025-02485 2026-10-04T05:36:55.243959+00:00 bdu:2025-02485 https://vulnerability.circl.lu/vuln/cve-2025-48378 CVE-2025-48378 — Dnn.Platform vulnerable to Stored Cross-Site Scripting (XSS) with svg files rendered inline 2026-10-04T05:36:55.244089+00:00

Affected: dnnsoftware Dnn.Platform

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 9.13.9, uploaded SVG files could contain scripts and if rendered inline those scripts could run allowing XSS attacks. Version 9.13.9 fixes the issue.