~ / search / GHSA-69cg-w8vm-h229

GHSA-69cg-w8vm-h229

XSS/HTML Injection Vulnerability in Umbraco Preview Badge

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-10761

Packages

EcosystemPackageAffectedFixed in
NuGet Umbraco.Cms >= 11.0.0, < 13.5.3 13.5.3
NuGet Umbraco.Cms >= 14.0.0, < 14.3.2 14.3.2
NuGet Umbraco.Cms >= 15.0.0, < 15.1.2 15.1.2
NuGet Umbraco.Cms >= 10.8.7, < 10.8.8 10.8.8
NuGet Umbraco.Cms.Web.Common >= 11.0.0, < 13.5.3 13.5.3
NuGet Umbraco.Cms.Web.Common >= 14.0.0, < 14.3.2 14.3.2
NuGet Umbraco.Cms.Web.Common >= 15.0.0, < 15.1.2 15.1.2
NuGet Umbraco.Cms.Web.Common >= 10.8.7, < 10.8.8 10.8.8

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact Authenticated users are able to exploit an XSS vulnerability when viewing previewed content. ### Patches Will be patched in 10.8.8, 13.5.3, 14.3.2 and 15.1.2. ### Workarounds None available.

References

External links from the advisory. They lead to third-party sites.