Medium severity4.3NVD Advisory· Published Apr 9, 2025· Updated Jun 17, 2026

CVE-2025-32371

Description

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. A url could be crafted to the DNN ImageHandler to render text from a querystring parameter. This text would display in the resulting image and a user that trusts the domain might think that the information is legitimate. This vulnerability is fixed in 9.13.4.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dnnsoftware/Dotnetnuke
cpe:2.3:a:dnnsoftware:dotnetnuke:*:*:*:*:*:*:*:*
Range: <9.13.4
DNN/DNNllm-fuzzy
Range: >=9.13.4
Dnnsoftware/Dnn.platformv5
Range: < 9.13.4

Patches

Vulnerability mechanics

References

github.com/dnnsoftware/Dnn.Platform/commit/5def7cc2e7931bb1041b21540bde99f96874a5a9nvdPatch
github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-2rrc-g594-rhqwnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000