| Package | Affected versions | Patched versions |
|---|---|---|
| Umbraco.Cms.StaticAssets | ≥ 14.0.0, < 14.3.2≥ 15.0.0, < 15.1.2 | 14.3.215.1.2 |
| umbraco cms | ≥ 14.0.0, < 14.3.2≥ 15.0.0, < 15.1.2 | 14.3.215.1.2 |
| @umbraco-cms/backoffice | ≥ 14.0.0, < 14.3.2≥ 15.0.0, < 15.1.2 | 14.3.215.1.2 |
Authenticated users are able to exploit an XSS vulnerability when viewing certain localized backoffice components.
Will be patched in 14.3.2 and 15.1.2.
Note: This issue was reported by Pratik Patil from NetSPI @Nexusss-ppatil
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free