Umbraco.Cms: XSS/HTML Injection in Umbraco Backoffice confirmation dialog

Description

References

• umbraco/Umbraco-CMS security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2026-46609 · ADVISORY
• umbraco/Umbraco-CMS · PACKAGE

Autres vulnérabilités de Umbraco.Cms

• CVE-2026-69197ÉLEVÉE 8.7Umbraco is an ASP.NET CMS. Prior to 13.15.1, 17.5.3, and 18.0.2, the Content Delivery API applies member and Public Access checks to the dir…
• CVE-2026-46616MOYENNE 6.1Umbraco is an ASP.NET CMS. Prior to versions 13.14.0 and 17.4.0, some of the Surface Controllers in the CMS provide to support member relate…
• CVE-2026-31834ÉLEVÉE 7.2Umbraco is an ASP.NET CMS. From 15.3.1 to before 16.5.1 and 17.2.2, A privilege escalation vulnerability has been identified in Umbraco CMS.…
• CVE-2026-31833MOYENNE 6.7Umbraco is an ASP.NET CMS. From 16.2.0 to before 16.5.1 and 17.2.2, An authenticated backoffice user with access to Settings can inject mali…
• CVE-2026-31832MOYENNE 5.4Umbraco is an ASP.NET CMS. From 14.0.0 to before 16.5.1 and 17.2.2, A broken object-level authorization vulnerability exists in a backoffice…