Security Advisory
CVE-2018-17256
4.8
MEDIUM
Vulnerability Description
Persistent cross-site scripting (XSS) vulnerability in Umbraco CMS 7.12.3 allows authenticated users to inject arbitrary web script via the Header Name of a content (Blog, Content Page, etc.). The vulnerability is exploited when updating or removing public access of a content.
Published Date
November 27, 2018
Official Source
NIST NVD Advisory