CVE-2018-17256

Published: 2018-11-27T19:29Z

Last Modified: 2024-11-21T03:54Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Persistent cross-site scripting (XSS) vulnerability in Umbraco CMS 7.12.3 allows authenticated users to inject arbitrary web script via the Header Name of a content (Blog, Content Page, etc.). The vulnerability is exploited when updating or removing public access of a content. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt