← Back to CVE List

CVE-2020-5809

Published: 2020-12-30T16:15Z
Last Modified: 2024-11-21T05:34Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current. An authenticated user can inject arbitrary JavaScript code into iframes when editing content using the TinyMCE rich-text editor, as TinyMCE is configured to allow iframes by default in Umbraco CMS. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt