Cross site scripting

2020-12-3016:15:00

PRIOn knowledge base

www.prio-n.com

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current. An authenticated user authorized to upload media can upload a malicious .svg file which act as a stored XSS payload.

CPENameOperatorVersion
umbraco_cmsle8.9.1

CPE	Name	Operator	Version
	umbraco_cms	le	8.9.1

References

www.tenable.com/security/research/tra-2020-59