CVE-2025-52485 | dnnsoftware Dnn.Platform up to 10.0.0 Activity Feed Attachments Endpoint cross site scripting (GHSA-wwc9-wmm3-2pmf / EUVD-2025-18803)

June 21, 2025 Yanac

A vulnerability was found in dnnsoftware Dnn.Platform up to 10.0.0. It has been classified as problematic. Affected is an unknown function of the component Activity Feed Attachments Endpoint. The manipulation leads to cross site scripting.

This vulnerability is traded as CVE-2025-52485. It is possible to launch the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More