Lucene search
K

4 matches found

OSV
OSV
added 2022/05/17 12:30 a.m.13 views

GHSA-XJ94-RGF9-CQ37 Umbraco CMS vulnerable to stored XSS

Cross-site scripting XSS vulnerability in Umbraco CMS before 7.7.3 allows remote attackers to inject arbitrary web script or HTML via the "page name" aka nodename parameter during the creation of a new page, related to Umbraco.Web.UI/umbraco/dialogs/Publish.aspx.cs and...

5.4CVSS5.3AI score0.00195EPSS
Exploits0References4
Veracode
Veracode
added 2019/07/08 9:2 a.m.16 views

Cross-site Scripting (XSS)

umbraco cms is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript into a victim's browser via the nodename parameter during the creation of a new page related to Umbraco.Web.UI/umbraco/dialogs/Publish.aspx.cs and...

5.4CVSS5.4AI score0.00195EPSS
Exploits0References3Affected Software2
NVD
NVD
added 2017/10/12 8:29 a.m.9 views

CVE-2017-15279

Cross-site scripting XSS vulnerability in Umbraco CMS before 7.7.3 allows remote attackers to inject arbitrary web script or HTML via the "page name" aka nodename parameter during the creation of a new page, related to Umbraco.Web.UI/umbraco/dialogs/Publish.aspx.cs and...

5.4CVSS5.4AI score0.00195EPSS
Exploits0References2
Cvelist
Cvelist
added 2017/10/12 8:0 a.m.15 views

CVE-2017-15279

Cross-site scripting XSS vulnerability in Umbraco CMS before 7.7.3 allows remote attackers to inject arbitrary web script or HTML via the "page name" aka nodename parameter during the creation of a new page, related to Umbraco.Web.UI/umbraco/dialogs/Publish.aspx.cs and...

5.3AI score0.00195EPSS
Exploits0References2
Rows per page
Query Builder