CVE-2020-5810

A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current

published December 30, 2020

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.2th percentile for exploit probability.

CVSS
—
EPSS
62%
Percentile
99.2
In the wild
Unconfirmed
What it is

A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current. An authenticated user authorized to upload media can upload a malicious .svg file which act as a stored XSS payload.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.61954 · 99.2th percentile
Published
2020-12-30T15:18Z
EPSS history
Timeline
  • 30 DEC 15:18Z
    A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current
    cvelistv5