Skip to content
Threat Feed

Tag

Dotnetnuke

2 briefs RSS
high advisory

DNN (DotNetNuke) SVG Upload Vulnerability (CVE-2026-40321)

DNN (formerly DotNetNuke) before 10.2.2 is vulnerable to stored cross-site scripting (XSS) via malicious SVG file uploads, potentially leading to account takeover and arbitrary code execution.

dnn dotnetnuke svg xss cve-2026-40321 upload
2r 3t 1c
high advisory

DotNetNuke.Core Stored XSS via SVG Upload

DotNetNuke.Core is vulnerable to stored cross-site scripting (XSS) where a user can upload a specially crafted SVG file containing malicious scripts, potentially targeting both authenticated and unauthenticated DNN users, with successful exploitation requiring user interaction and leading to high impact on confidentiality, integrity, and availability.

dotnetnuke xss svg web-application
2r 2t