CVE-2020-5811

An authenticated path traversal vulnerability exists during package installation in Umbraco CMS

CVE-2020-9472

Umbraco CMS 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Package functionality.

CVE-2020-29454

Editors/LogViewerController.cs in Umbraco through 8.9.1 allows a user to visit a logviewer endpoint even if they lack Applications.Settings access.

CVE-2020-9471

Umbraco Cloud 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Packages functionality.

CVE-2020-7210

Umbraco CMS 8.2.2 allows CSRF to enable/disable or delete user accounts.

CVE-2020-5809

A stored XSS vulnerability exists in Umbraco CMS

CVE-2020-5810

A stored XSS vulnerability exists in Umbraco CMS