Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-17256

Persistent cross-site scripting (XSS) vulnerability in Umbraco CMS 7.12.3 allows authenticated users to inject arbitrary web script via the Header Name of a content (Blog, Content

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cspcert

Description

Persistent cross-site scripting (XSS) vulnerability in Umbraco CMS 7.12.3 allows authenticated users to inject arbitrary web script via the Header Name of a content (Blog, Content Page, etc.). The vulnerability is exploited when updating or removing public access of a content.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CyberSecurity Philippines - CERT UmbracoCMS

  • 7.12.3affected

References