Executive brief
Reflected Cross-Site Scripting (XSS) in module actions in edit mode
Affected products
- NuGet DotNetNuke.Web
- NuGet DotNetNuke.Core
Junglewise Threat Intelligence
CVE-2025-48377: Reflected Cross-Site Scripting (XSS) in module actions in edit mode
CVE-2025-48377 · Severity: medium · CVSS 4 · Published 2025-05-23
Technologies: DotNetNuke.Core (NuGet). Vendors: NuGet.