Cross-site Scripting

Every one of the 33 is a mark on the map. Named now: 1 to 26, most at risk first.

1. DotNetNuke.Core has stored cross-site-scripting (XSS) via SVG uploadCVE-2026-40321dnnsoftware · CVSS 8.1 · 6.4% likely

   CWE-87

2. Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0 allows remote attackers to store and embed the malicious script into the admin notification page. The exploit…CVE-2019-12562Dnnsoftware · 6.2% likely

   CWE-79

3. Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to inject arbitrary web script or HTML via the __dnnVariable…CVE-2013-4649Dnnsoftware · 2.5% likely

   CWE-79

4. Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2015-1566Dnnsoftware · 1.8% likely

   CWE-79

5. Cross-site scripting (XSS) vulnerability in the search functionality in DotNetNuke 4.8 through 5.1.4 allows remote attackers to inject arbitrary web script or HTML via search term…CVE-2009-4110Dnnsoftware · 1.7% likely

   CWE-79

6. Cross-site scripting (XSS) vulnerability in Default.aspx in DotNetNuke 4.8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.CVE-2008-6644Dnnsoftware · 1.5% likely

   CWE-79

7. Cross-site scripting (XSS) vulnerability in Install/InstallWizard.aspx in DotNetNuke 5.05.01 and 5.06.00 allows remote attackers to inject arbitrary web script or HTML via the __V…CVE-2010-4514Dnnsoftware · 1.5% likely

   CWE-79

8. DNN (formerly DotNetNuke) 9.1.1 allows cross-site scripting (XSS) via XML.CVE-2018-14486Dnnsoftware · 1.1% likely

   CWE-79

9. Cross-site scripting (XSS) vulnerability in the error handling page in DotNetNuke 4.6.2 through 4.8.3 allows remote attackers to inject arbitrary web script or HTML via the querys…CVE-2008-6733Dnnsoftware · 1.1% likely

   CWE-79

10. Cross-site scripting (XSS) vulnerability in the Language skin object in DotNetNuke before 4.8.4 allows remote attackers to inject arbitrary web script or HTML via "newly generated…CVE-2008-6732Dnnsoftware · 1.1% likely

    CWE-79

11. Cross-site scripting (XSS) vulnerability in Website\admin\Sales\paypalipn.aspx in DotNetNuke (DNN) before 4.9.3 allows remote attackers to inject arbitrary web script or HTML via…CVE-2009-1366Dnnsoftware · 1.0% likely

    CWE-79

12. Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote authenticated users to inject arbitrary web script or HTML via vectors…CVE-2013-3943Dnnsoftware · 0.9% likely

    CWE-79

13. Cross-site scripting (XSS) vulnerability in DotNetNuke 6.x through 6.0.2 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted URL containing…CVE-2012-1030Dnnsoftware · 0.9% likely

    CWE-79

14. DNN (formerly DotNetNuke) through 9.4.4 allows XSS (issue 1 of 2).CVE-2020-5186Dnnsoftware · 0.9% likely

    CWE-79

15. DotNetNuke (DNN) 9.9.1 CMS is vulnerable to a Stored Cross-Site Scripting vulnerability in the user profile biography section which allows remote authenticated users to inject arb…CVE-2021-31858Dnnsoftware · 0.7% likely

    CWE-79

16. Cross-site scripting (XSS) vulnerability in the user-profile biography section in DotNetNuke (DNN) before 8.0.1 allows remote authenticated users to inject arbitrary web script or…CVE-2016-7119Dnnsoftware · 0.7% likely

    CWE-79

17. DNN Vulnerable to Stored Cross-Site Scripting (XSS) in the Prompt moduleCVE-2025-59545dnnsoftware · CVSS 9.1 · 0.5% likely

    CWE-79

18. An arbitrary file upload vulnerability in the Digital Assets Manager module of DNN Corp DotNetNuke v7.0.0 to v9.10.2 allows attackers to execute arbitrary code via a crafted SVG f…CVE-2022-47053Dnnsoftware · CVSS 5.4 · 0.4% likely

    CWE-79

19. DotNetNuke 9.5 - Persistent Cross-Site ScriptingCVE-2020-37103Dnnsoftware · CVSS 6.4 · 0.4% likely

    CWE-79

20. Dnn.Platform vulnerable to Stored Cross-Site Scripting (XSS) with svg files rendered inlineCVE-2025-48378dnnsoftware · CVSS 6.1 · 0.3% likely

    CWE-79

21. DotNetNuke.Core Vulnerable to Stored XSS in Module Deletion Confirmation ModalCVE-2026-24837dnnsoftware · CVSS 7.7 · 0.3% likely

    CWE-79

22. DotNetNuke.Core Vulnerable to Stored XSS in Scheduler LogNotesCVE-2026-24836dnnsoftware · CVSS 7.7 · 0.3% likely

    CWE-79

23. Dnn.Platform vulnerable to Reflected Cross-Site Scripting (XSS) in module actions in edit modeCVE-2025-48377dnnsoftware · CVSS 6 · 0.2% likely

    CWE-79

24. DNN.PLATFORM Allows Reflected Cross-Site Scripting (XSS) in some TokenReplace situations with SkinObjectsCVE-2025-52486dnnsoftware · CVSS 6.1 · 0.2% likely

    CWE-79

25. DotNetNuke.Core Vulnerable to Stored XSS via Module TitleCVE-2026-24838dnnsoftware · CVSS 9.1 · 0.2% likely

    CWE-79

26. DNN.PLATFORM Allows Stored Cross-Site Scripting (XSS) in Activity FeedCVE-2025-52485dnnsoftware · CVSS 5.1 · 0.2% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.