~ / search / GHSA-wrrj-r2j4-969w

GHSA-wrrj-r2j4-969w

Umbraco CMS vulnerable to stored XSS

Source: GitHub Advisory Database (reviewed) Moderate CVE-2018-17256

Packages

EcosystemPackageAffectedFixed in
NuGet umbraco <= 7.12.3 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Persistent cross-site scripting (XSS) vulnerability in Umbraco CMS 7.12.3 allows authenticated users to inject arbitrary web script via the Header Name of a content (Blog, Content Page, etc.). The vulnerability is exploited when updating or removing public access of a content.

References

External links from the advisory. They lead to third-party sites.