CVE-2026-24833Disclosure(dnnsoftware / dotnetnuke)

LOWCVSS 5.4 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to versions 9.13.10 and 10.2.0, a module could install with richtext in its description field which could contain scripts that will run for user in the Persona Bar. Versions 9.13.10 and 10.2.0 contain a fix for the issue.

dnnsoftware CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-9r3h-mpf8-25gj

Weakness type (CWE)

CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

dotnetnuke

Threat summary

3 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 1 signal
Disclosure: 3 classified signals
Peaked 1d ago at 2 mentions (2026-01-28); latest day: 1
3 total mentions across 2 days

Affected systems

Vendors

dnnsoftware

Products

dotnetnuke

Deep dive

Activity timeline3 mentions / 2d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-01-28	2	Disclosure2
2026-02-02	1	Disclosure1

Full discourse3 posts

CRAC Learning - Tech@cracbot250d
Disclosure
CVE-2026-24833 (CVSS:7.6, HIGH) is Undergoing Analysis. DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to v..https://nvd.nist.gov/vuln/detail/CVE-2026-24833 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The text announces CVE-2026-24833 with a high CVSS score and indicates it is under analysis for the DNN CMS, but provides no further technical, exploit, or mitigation details.
0101140
171 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds255d
Disclosure
CVE-2026-24833 Cross-Site Scripting in DNN CMS via Malicious Module Description ... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-24833 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
A brief alert announcing CVE‑2026‑24833, a Cross‑Site Scripting flaw in DNN CMS, with a link to further details but no PoC, exploit, patch, or evidence of active exploitation.
0000068
4.0K followersView on X
CVE@CVEnew255d
Disclosure
CVE-2026-24833 DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to versions 9.13.10 and 10.2.0, a module could ins… https://www.cve.org/CVERecord?id=CVE-2026-24833
Post summary
The post announces CVE-2026-24833 affecting DNN versions prior to 9.13.10 and 10.2.0, but offers no details on PoC, exploit, patch, or technical specifics.
00000428
56.5K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	dnnsoftware	dotnetnuke	-	-	-

Explore more

Back to dashboard dnnsoftware CVEs dotnetnuke vulnerabilities