CVE-2026-24833 | dnnsoftware Dnn.Platform up to 9.13.9/10.1.x Persona Bar Description cross site scripting (GHSA-9r3h-mpf8-25gj)

A vulnerability was found in dnnsoftware Dnn.Platform up to 9.13.9/10.1.x. It has been rated as problematic. Affected is an unknown function of the component Persona Bar. The manipulation of the argument Description leads to cross site scripting.

This vulnerability is listed as CVE-2026-24833. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.