GHSA-XJ94-RGF9-CQ37 Umbraco CMS vulnerable to stored XSS

Cross-site scripting XSS vulnerability in Umbraco CMS before 7.7.3 allows remote attackers to inject arbitrary web script or HTML via the "page name" aka nodename parameter during the creation of a new page, related to Umbraco.Web.UI/umbraco/dialogs/Publish.aspx.cs and...

CVE-2017-15280

The CVE-2017-15280 entry applies to Umbraco CMS and describes an XML External Entity (XXE) vulnerability affecting earlier Umbraco versions (notably before 7.7.3). The underlying issue is XXE in the XML parsing path related to Umbraco.Web/umbraco.presentation/umbraco/dialogs/importDocumenttype.as...