NuGet/DNN.PLATFORM — 5 CVEs

CRITICAL10.0CVE-2025-64095DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite

from 0, < 10.1.1

HIGH8.6CVE-2025-52488DNN.PLATFORM leaks NTLM hash via SMB Share Interaction with malicious user input

>= 6.0.0, < 10.0.1

MEDIUM6.1CVE-2025-52486DNN.PLATFORM Allows Reflected Cross-Site Scripting (XSS) in some TokenReplace situations with SkinObjects

>= 6.0.0, < 10.0.1

MEDIUM5.4DNN.PLATFORM Allows Stored Cross-Site Scripting (XSS) in Activity Feed

>= 6.0.0, < 10.0.1

—DNN.PLATFORM possibly allows bypass of IP Filters

>= 7.0.0, < 10.0.1

pkg:NuGet/DNN.PLATFORM