CVE-2025-52486 – DNN TokenReplace URL Sanitation Vulnerability

June 21, 2025

CVE ID : CVE-2025-52486

Published : June 21, 2025, 3:15 a.m. | 3 hours ago

Description : DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows specially crafted content in URLs to be used with TokenReplace and not be properly sanitized by some SkinObjects. This issue has been patched in version 10.0.1.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-52488 – DNN NTLM Hash Exposure Vulnerability

Next Article CVE-2025-52485 – DNN Cross-Site Scripting (XSS) Vulnerability

This week in AI dev tools: Gemini 2.5 Pro and Flash GA, GitHub Copilot Spaces, and more (June 20, 2025)

Gemini 2.5 Pro and Flash are generally available and Gemini 2.5 Flash-Lite preview is announced

CSS Cascade Layers Vs. BEM Vs. Utility Classes: Specificity Control

IBM launches new integration to help unify AI security and governance

One of World of Warcraft’s deadliest entities makes a world-shattering return after nearly 20 years — and he’s city-sized

It feels like Blizzard has abandoned Diablo 2: Resurrected — but there’s one way to keep it alive for years to come

Steam’s performance tracking tool is becoming more like the Steam Deck’s — you can try it out right now

Borderlands 4 is killing off a tired “FOMO” trend — I hope other developers follow suit

Dr. Axel’s JavaScript flashcards

Dr. Axel’s JavaScript flashcards

Syntax-Highlight – Custom Element For Syntax Highlighting Content

WelsonJS – Build a Windows app on the Windows built-in JavaScript engine

One of World of Warcraft’s deadliest entities makes a world-shattering return after nearly 20 years — and he’s city-sized

One of World of Warcraft’s deadliest entities makes a world-shattering return after nearly 20 years — and he’s city-sized

It feels like Blizzard has abandoned Diablo 2: Resurrected — but there’s one way to keep it alive for years to come

Steam’s performance tracking tool is becoming more like the Steam Deck’s — you can try it out right now

CVE-2025-52486 – DNN TokenReplace URL Sanitation Vulnerability

CVE-2025-52556 – “rfc3161-client TSA Signature Validation Bypass”

CVE-2025-6394 – Code-projects Simple Online Hotel Reservation System SQL Injection Vulnerability

Microsoft shadow launched this mouse that pairs with the new Surface Pro and Surface Laptop perfectly

This GNOME Extension Simplifies iPhone Screen Sharing on Linux

CVE-2025-46611 – ARTEC EMA Mail Cross Site Scripting Vulnerability

Try Firefox’s Experimental Link Previews with AI Summary

Jobs To Be Done Framework: Understanding the User’s Jobs

From Beta to Bedrock: Build Products that Stick.

CVE-2025-26783 – Samsung Mobile Processor, Wearable Processor, and Modem Exynos RRC Denial of Service Vulnerability

Transform JSON into Typed Collections with Laravel’s AsCollection::of()

CVE-2025-52486 – DNN TokenReplace URL Sanitation Vulnerability

Related Posts