Launch Week Day 1: Announcing Security Design Review
Start for Free
UNKNOWN NuGet

DNN allows Stored Cross-Site Scripting (XSS) with svg files rendered inline

GHSA-m4hf-fxcg-cp34 · CVE-2025-48378

Published · Modified

Description

Uploaded SVG files could contain scripts and if rendered inline those scripts could run allowing XSS attacks.

References

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes