Lucene search
GoogleOSV:GHSA-WRRJ-R2J4-969WHistoryMay 14, 2022 - 1:44 a.m.
Umbraco CMS vulnerable to stored XSS
2022-05-1401:44:31
Google
osv.dev
9
umbraco
cms
xss
vulnerability
authenticated users
header name
content
blog
content page
web script
public access
EPSS
0.001
Percentile
22.7%
Persistent cross-site scripting (XSS) vulnerability in Umbraco CMS 7.12.3 allows authenticated users to inject arbitrary web script via the Header Name of a content (Blog, Content Page, etc.). The vulnerability is exploited when updating or removing public access of a content.
Related
github
github
Umbraco CMS vulnerable to stored XSS
2022-05-14 01:44:31
nvd
nvd
CVE-2018-17256
2018-11-27 19:29:00
veracode
veracode
Cross-site Scripting (XSS)
2019-07-08 12:41:43
osv
osv
CVE-2018-17256
2018-11-27 19:29:00
prion
prion
Cross site scripting
2018-11-27 19:29:00
cvelist
cvelist
CVE-2018-17256
2018-11-27 21:00:00
cve
cve
CVE-2018-17256
2018-11-27 21:00:00