CVE-2020-5810

2020-12-3016:15:12

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current. An authenticated user authorized to upload media can upload a malicious .svg file which act as a stored XSS payload.

CPENameOperatorVersion
umbraco-cmseqrelease-7.2.0-RC
umbraco-cmseqrelease-7.5.6
umbraco-cmseqdev-7.6-alpha055
umbraco-cmseq7.3.0-beta
umbraco-cmseqrelease-7.6.7
umbraco-cmseqrelease-7.2.5-RC
umbraco-cmseqRelease-4.11.4
umbraco-cmseqdev-7.6-alpha073
umbraco-cmseqRelease-6.0.0
umbraco-cmseqrelease-7.1.7

Name	Operator	Version
umbraco-cms	eq	release-7.2.0-RC
umbraco-cms	eq	release-7.5.6
umbraco-cms	eq	dev-7.6-alpha055
umbraco-cms	eq	7.3.0-beta
umbraco-cms	eq	release-7.6.7
umbraco-cms	eq	release-7.2.5-RC
umbraco-cms	eq	Release-4.11.4
umbraco-cms	eq	dev-7.6-alpha073
umbraco-cms	eq	Release-6.0.0
umbraco-cms	eq	release-7.1.7

Rows per page:

1-10 of 2441

References

www.tenable.com/security/research/tra-2020-59