CVE-2018-17256

Persistent cross-site scripting (XSS) vulnerability in Umbraco CMS 7.12.3 allows authenticated users to inject arbitrary web script via the Header Name of a content (Blog, Content Page, etc.). The vulnerability is exploited when updating or removing public access of a content.

Score

CVSS 3.0 4.8 Medium

Status

Modified - vulnerability@cspcert.ph

Published

2018-11-27

Last modified

2024-09-17

Weaknesses

CWE-79

Affected products

• Umbracocms (Cybersecurity Philippines - Cert)
• Umbraco Cms (Umbraco)

References

• https://www.cspcert.ph/advisories/2018/CVE-2018-17256.html