Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qv67-8hwr-88xh

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current. An authenticated user authorized to upload media can upload a malicious .svg file which act as a stored XSS payload.

A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current. An authenticated user authorized to upload media can upload a malicious .svg file which act as a stored XSS payload.

EPSS

Процентиль: 87%
0.03495
Низкий

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
около 5 лет назад

A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current. An authenticated user authorized to upload media can upload a malicious .svg file which act as a stored XSS payload.

EPSS

Процентиль: 87%
0.03495
Низкий

Дефекты

CWE-79