CVE-2020-5186: Dnnsoftware DotNetNuke

Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days.

DNN (formerly DotNetNuke) through 9.4.4 allows XSS (issue 1 of 2).

Affected products

• Dnnsoftware DotNetNuke: up to and including 9.4.4

Published 2020-02-24. Last modified 2026-06-17.