Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2024-10761

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-69cg-w8vm-h229

XSS/HTML Injection Vulnerability in Umbraco Preview Badge ### Impact Authenticated users are able to exploit an XSS vulnerability when viewing previewed content. ### Patches Will be patched in 10.8.8, 13.5.3, 14.3.2 and 15.1.2. ### Workarounds None available.

gitlab/nuget/Umbraco.Cms.Core/CVE-2024-10761

Umbraco CMS Cross-site Scripting vulnerability A vulnerability was found in Umbraco CMS 12.3.6. It has been classified as problematic. Affected is an unknown function of the file /Umbraco/preview/frame?id{} of the component Dashboard. The manipulation of the argument culture leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

gitlab/nuget/Umbraco.Cms/CVE-2024-10761

XSS/HTML Injection Vulnerability in Umbraco Preview Badge Authenticated users are able to exploit an XSS vulnerability when viewing previewed content.

gitlab/nuget/Umbraco.CMS/CVE-2024-10761

XSS/HTML Injection Vulnerability in Umbraco Preview Badge Authenticated users are able to exploit an XSS vulnerability when viewing previewed content.

gitlab/nuget/Umbraco.Cms.Web.Common/CVE-2024-10761

XSS/HTML Injection Vulnerability in Umbraco Preview Badge Authenticated users are able to exploit an XSS vulnerability when viewing previewed content.