Medium severity5.4NVD Advisory· Published Feb 24, 2020· Updated Jun 17, 2026
CVE-2020-5186
CVE-2020-5186
Description
DNN (formerly DotNetNuke) through 9.4.4 allows XSS (issue 1 of 2).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
DotNetNuke.CoreNuGet | <= 9.4.4 | — |
Affected products
3- DNN/DNNdescription
Patches
Vulnerability mechanics
References
6- packetstormsecurity.com/files/156483/DotNetNuke-CMS-9.5.0-Cross-Site-Scripting.htmlnvdExploitThird Party AdvisoryVDB EntryWEB
- github.com/advisories/GHSA-9phr-h5mx-4fp6ghsaADVISORY
- github.com/dnnsoftware/Dnn.Platform/releasesnvdRelease NotesThird Party Advisory
- nvd.nist.gov/vuln/detail/CVE-2020-5186ghsaADVISORY
- medium.com/@SajjadPourali/dnn-dotnetnuke-cms-not-as-secure-as-you-think-e8516f789175ghsaWEB
- medium.com/%40SajjadPourali/dnn-dotnetnuke-cms-not-as-secure-as-you-think-e8516f789175nvd
News mentions
0No linked articles in our index yet.