CVE-2023-38694
12.12.2023, 17:15
Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.7.0, and 12.1.0, a user with access to a specific part of the backoffice is able to inject HTML code into a form where it is not intended. Versions 8.18.10, 10.7.0, and 12.1.0 contain a patch for this issue.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| umbraco | umbraco_cms | 8.0.0 ≤ 𝑥 < 8.18.10 |
| umbraco | umbraco_cms | 9.0.0 ≤ 𝑥 < 10.7.0 |
| umbraco | umbraco_cms | 11.0.0 ≤ 𝑥 < 12.1.0 |
𝑥
= Vulnerable software versions