Skip to content
Sign in
Not rated

CVE-2020-5809 A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current

Description

A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current. An authenticated user can inject arbitrary JavaScript code into iframes when editing content using the TinyMCE rich-text editor, as TinyMCE is configured to allow iframes by default in Umbraco CMS.

Affected products and versions

Product Affected versions Fixed in
Umbraco CMS Versions not published

Other CVEs of Umbraco CMS

The 3 CVEs of Umbraco CMS →
CVE-2020-5810 A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current Not rated CVE-2020-5811 An authenticated path traversal vulnerability exists during package installation in Umbraco… Not rated
Track this CVE