CVE Intelligence

Dotnetfoundation vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Dotnetfoundation products: 3 record(s), with severity, exploitation and fixes.

Piranha Cms 3

Exploited only (KEV) →

CVE-2025-67291 Medium · 6.1 CWE-79 Dec 22, 2025
Cross-site Scripting (XSS) in Dotnetfoundation Piranha Cms
A stored cross-site scripting (XSS) vulnerability in the Media module of Piranha CMS v12.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name field.
CVE-2025-67290 Medium · 6.1 CWE-79 Dec 22, 2025
Cross-site Scripting (XSS) in Dotnetfoundation Piranha Cms
A stored cross-site scripting (XSS) vulnerability in the Page Settings module of Piranha CMS v12.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Excerpt field.
CVE-2025-61413 Medium · 6.1 CWE-79 Oct 23, 2025
Cross-site Scripting (XSS) in Dotnetfoundation Piranha Cms
A stored cross-site scripting (XSS) vulnerability in the /manager/pages component of Piranha CMS v12.0 allows attackers to execute arbitrary web scripts or HTML via creating a page and injecting a crafted payload into the Markdown blocks.