Em resumo
- CVE-2020-5809 é uma vulnerabilidade MÉDIO (CVSS 5.4) que afeta UmbracoCms.Core, umbraco cms (umbraco).
- Chance de exploração nos próximos 30 dias (EPSS): 0.69%, maior que 52.6% das vulnerabilidades.
- Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.
Description
A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current. An authenticated user can inject arbitrary JavaScript code into iframes when editing content using the TinyMCE rich-text editor, as TinyMCE is configured to allow iframes by default in Umbraco CMS.
NVD description
A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current. An authenticated user can inject arbitrary JavaScript code into iframes when editing content using the TinyMCE rich-text editor, as TinyMCE is configured to allow iframes by default in Umbraco CMS.
Mais vulnerabilidades de UmbracoCms.Core
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free