CVE-2025-64094 in Dnn.Platform

Riassunto

di MITRE • 29/10/2025

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 10.1.1, sanitization of the content of uploaded SVG files was not covering all possible XSS scenarios. This vulnerability exists because of an incomplete fix for CVE-2025-48378. This vulnerability is fixed in 10.1.1.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsabile: GitHub M
• Prenotare: 27/10/2025
• Divulgazione: 29/10/2025
• Moderazione: accettato
• Voce: VDB-330355
• CPE: pronto
• CWE: CWE-79 (confermato)
• CVSS: 6.4 (CNA)
• EPSS: 0.00183
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-64094
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-64094
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-64094/