CVE-2021-31858: Dnnsoftware DotNetNuke

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

DotNetNuke (DNN) 9.9.1 CMS is vulnerable to a Stored Cross-Site Scripting vulnerability in the user profile biography section which allows remote authenticated users to inject arbitrary code via a crafted payload.

Affected products

• Dnnsoftware DotNetNuke: up to and including 9.10.2

Published 2022-07-20. Last modified 2026-06-17.