CNNVD-202506-2845 Information

CNNVD ID

CNNVD-202506-2845

CVE-2025-52485

  • CNNVD Published: 2025-06-21

Description (Chinese)

Dnn.Platform是Dnn Software开源的一个开源网络内容管理平台(CMS)。 Dnn.Platform 10.0.1之前版本存在跨站脚本漏洞,该漏洞源于特制请求注入脚本,可能导致跨站脚本攻击。

Description (English)

Dnn. Platform is an open-source web content management platform (CMS) for the Dnn Software open source. The pre-Dnn. Platform10.0.1 version had a cross-site script loophole, which originated from a special request for a script, which could lead to a cross-site script attack.

Hazard Level

High

Vulnerability Type

跨站脚本

Published

2025-06-21

Last Modified

2026-02-24

References

https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-wwc9-wmm3-2pmf

Patch

https://github.com/dnnsoftware/Dnn.Platform/releases

Share on: