Search for packages
| purl | pkg:nuget/UmbracoCms@7.7.2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-uf32-4mb4-97fz
Aliases: CVE-2017-15279 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Cross-site scripting (XSS) vulnerability in Umbraco CMS allows remote attackers to inject arbitrary web script or HTML via the "page name" (aka nodename) parameter during the creation of a new page, related to Umbraco.Web.UI/umbraco/dialogs/Publish.aspx.cs and Umbraco.Web/umbraco.presentation/umbraco/dialogs/notifications.aspx.cs. |
Affected by 0 other vulnerabilities. |
|
VCID-z8zv-hnpq-gyhb
Aliases: CVE-2017-15280 |
Improper Restriction of XML External Entity Reference XML external entity (XXE) vulnerability in Umbraco CMS allows attackers to obtain sensitive information by reading files on the server or sending TCP requests to intranet hosts (aka SSRF), related to Umbraco.Web/umbraco.presentation/umbraco/dialogs/importDocumenttype.aspx.cs. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-02T04:37:11.482700+00:00 | GitLab Importer | Affected by | VCID-z8zv-hnpq-gyhb | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/UmbracoCms/CVE-2017-15280.yml | 38.6.0 |
| 2026-06-02T04:37:11.367475+00:00 | GitLab Importer | Affected by | VCID-uf32-4mb4-97fz | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/UmbracoCms/CVE-2017-15279.yml | 38.6.0 |