CVE-2025-32374

7.5 highEPSS 0.4%

High (7.5) in dnnsoftware dotnetnuke. EPSS 0.4% chance of exploitation in the next 30 days.

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Possible denial of service with specially crafted information in the public registration form. This vulnerability is fixed in 9.13.8.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-31)
CWE: CWE-770
Published: 2025-04-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dnnsoftware:dotnetnuke

References

https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-vc6j-mcqj-rgfp

Check your stack JSON