| Package | Affected versions | Patched versions |
|---|---|---|
| umbraco | ≤ 7.12.3 | |
| umbraco cms | = 7.12.3 |
Persistent cross-site scripting (XSS) vulnerability in Umbraco CMS 7.12.3 allows authenticated users to inject arbitrary web script via the Header Name of a content (Blog, Content Page, etc.). The vulnerability is exploited when updating or removing public access of a content.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free