En resumen
- CVE-2020-5809 es una vulnerabilidad MEDIO (CVSS 5.4) que afecta a UmbracoCms.Core, umbraco cms (umbraco).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.69%, mayor que el 52.6% de las vulnerabilidades.
- Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.
Description
A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current. An authenticated user can inject arbitrary JavaScript code into iframes when editing content using the TinyMCE rich-text editor, as TinyMCE is configured to allow iframes by default in Umbraco CMS.
NVD description
A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current. An authenticated user can inject arbitrary JavaScript code into iframes when editing content using the TinyMCE rich-text editor, as TinyMCE is configured to allow iframes by default in Umbraco CMS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free