CVE-2026-24784: DotNetNuke.Core has a potential XSS vulnerability in modules' header and footer

January 28, 2026 (updated February 4, 2026)

A content editor could inject scripts in module headers/footers that would run for other users.

References

github.com/advisories/GHSA-jjwg-4948-6wxp
github.com/dnnsoftware/Dnn.Platform
github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-jjwg-4948-6wxp
nvd.nist.gov/vuln/detail/CVE-2026-24784

Code Behaviors & Features

Detect and mitigate CVE-2026-24784 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →