Skip to content
Sign in
Not rated

CVE-2020-5810 A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current

Description

A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current. An authenticated user authorized to upload media can upload a malicious .svg file which act as a stored XSS payload.

Affected products and versions

Product Affected versions Fixed in
Umbraco CMS Versions not published

Other CVEs of Umbraco CMS

The 3 CVEs of Umbraco CMS →
CVE-2020-5809 A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current Not rated CVE-2020-5811 An authenticated path traversal vulnerability exists during package installation in Umbraco… Not rated
Track this CVE