Aller au contenu
Se connecter
Non notée

CVE-2020-5809 A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current

Description

A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current. An authenticated user can inject arbitrary JavaScript code into iframes when editing content using the TinyMCE rich-text editor, as TinyMCE is configured to allow iframes by default in Umbraco CMS.

Produits et versions touchés

Produit Versions touchées Corrigé en
Umbraco CMS Versions non publiées

Autres CVE de Umbraco CMS

Les 3 CVE de Umbraco CMS →
CVE-2020-5810 A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current Non notée CVE-2020-5811 An authenticated path traversal vulnerability exists during package installation in Umbraco… Non notée
Suivre cette CVE