CVE-2026-24837

HIGH7.6EPSS 0.02%

DotNetNuke.Core Vulnerable to Stored XSS in Module Deletion Confirmation Modal

Published: 1/28/2026Modified: 2/3/2026

Description

A module friendly name could include scripts that will run during some module operations in the Persona Bar.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1HIGH7.6CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

References (3)