https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T04:39:02.724054+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-292331 EUVD-2026-292331 2026-10-07T04:39:02.784490+00:00 EUVD-2026-292331 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40321 fkie_cve-2026-40321 2026-10-07T04:39:02.784551+00:00

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.2.2, a user could upload a specially crafted SVG file that could include scripts that can target both authenticated and unauthenticated DNN users. The impact is increased if the scripts are run by a power user. Version 10.2.2 patches the issue.

 https://cve.radiocsirt.org/vuln/ghsa-ffq7-898w-9jc4 GHSA-ffq7-898w-9jc4 — DotNetNuke.Core has stored cross-site-scripting (XSS) via SVG upload 2026-10-07T04:39:02.784607+00:00

Affected: NuGet: DotNetNuke.Core

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.2.2, a user could upload a specially crafted SVG file that could include scripts that can target both authenticated and unauthenticated DNN users. The impact is increased if the scripts are run by a power user. Version 10.2.2 patches the issue.