DNN (DotNetNuke) vulnerabilities

3 known CVE vulnerabilities in DNN (DotNetNuke), translated and rated.

CVE-2025-59545Critical
The Prompt module in DNN (DotNetNuke) before version 10.1.0 allows execution of commands that can return raw HTML. Malicious input, even if sanitized for display, can be executed when processed through certain commands, leading to potential script execution (XSS). Patched in version 10.1.0.
CVE-2018-18325HighActively exploited
DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete fix for CVE-2018-15811.
CVE-2018-15811HighActively exploited
DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS