Executive brief
DNN.PLATFORM Allows Reflected Cross-Site Scripting (XSS) in some TokenReplace situations with SkinObjects
Affected products
- NuGet Dnn.Platform
Junglewise Threat Intelligence
CVE-2025-52486: DNN.PLATFORM Allows Reflected Cross-Site Scripting (XSS) in some TokenReplace situations with SkinObjects
CVE-2025-52486 · Severity: low · CVSS 3.1 · Published 2025-06-20
Technologies: Dnn.Platform (NuGet). Vendors: NuGet.
Related threats
- DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite
- DNN CKEditor Provider allows unauthenticated upload out-of-the-box
- DNN.PLATFORM leaks NTLM hash via SMB Share Interaction with malicious user input
- DNN.PLATFORM possibly allows bypass of IP Filters
- DNN.PLATFORM Allows Stored Cross-Site Scripting (XSS) in Activity Feed