Description (CNA)
Persistent cross-site scripting (XSS) vulnerability in Umbraco CMS 7.12.3 allows authenticated users to inject arbitrary web script via the Header Name of a content (Blog, Content Page, etc.). The vulnerability is exploited when updating or removing public access of a content.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| CyberSecurity Philippines - CERT / UmbracoCMS | affected 7.12.3 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.