Skip to contentUmbraco vulnerabilities
Newest
- umbraco cms, umbraco-cms +1 moreUmbraco allows possible Admin-level access to backoffice without Auth under rare conditionsCVE-2023-37267Fix available7.5 High
- umbraco umbracoidentityextensions, identity extensibility +1 moreClient secret not mandatory in UmbracoIdentityExtensionsCVE-2023-323123.7 Low
- umbraco cmsUmbraco CMS 7.12.4 allows Remote Code Execution by authenticated administrators via msxsl:script...CVE-2019-25137Public exploit7.2 High
- umbraco formsFile upload vulnerability in Umbraco Forms v.8.7.0 allows unauthenticated attackers to execute...CVE-2021-332249.8 Critical
- umbraco cmsUmbraco Remote ApplicationURL OverwriteCVE-2022-22690Fix available8.6 High
- umbraco cmsUmbraco Password Reset URL PoisonCVE-2022-22691Fix available6.8 Medium
- umbraco formsA security issue in Umbraco Forms 4.0.0 to and including 8.7.5 could lead to a remote code...CVE-2021-373349.8 Critical
- umbraco cmsUmbraco CMS before 7.15.7 is vulnerable to Open Redirection due to insufficient url sanitization...CVE-2021-342546.1 Medium
- umbraco cmsUmbraco CMS vulnerable to stored XSSCVE-2020-58095.4 Medium
- umbraco cmsA stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current. An authenticated user...CVE-2020-5810EPSS 62.0%5.4 Medium
- umbraco cmsAuthenticated path traversal in Umbraco CMSCVE-2020-5811Public exploitFix available6.5 Medium
- umbraco cmsIncorrect permission enforcement in UmbracoCmsCVE-2020-29454Fix available4.3 Medium
- umbraco formsInsecure DefaultsCVE-2020-76855.4 Medium
- umbraco cmsUnrestricted Upload of File with Dangerous Type in Umbraco CMSCVE-2020-9472Fix available6.5 Medium
- umbraco cmsUmbraco CMS Authenticated File UploadCVE-2020-94718.8 High
- umbraco cmsUmbraco CMS vulnerable to CSRFCVE-2020-7210Fix available4.3 Medium
- umbracoIn Umbraco 7.3.8, there is SQL Injection in the backoffice/PageWApprove/PageWApproveApi...CVE-2019-139579.8 Critical
- umbraco cms, cybersecurity philippines - cert umbracocms +1 moreUmbraco CMS vulnerable to stored XSSCVE-2018-172564.8 Medium
- umbraco cmsUmbraco before 7.2.0 has a remote PHP code execution vulnerability because Umbraco.Web.UI/config...CVE-2014-100749.8 Critical
- umbraco cmsUmbraco CMS XXE VulnerabilityCVE-2017-15280Fix available5.5 Medium
- umbraco cmsUmbraco CMS vulnerable to stored XSSCVE-2017-15279Fix available5.4 Medium
- umbraco cmsThe FeedProxy.aspx script in Umbraco 4.7.0 allows remote attackers to proxy requests on their...CVE-2012-13019.8 Critical
- umbracoMultiple cross-site scripting (XSS) vulnerabilities in Umbraco before 7.4.0 allow remote...CVE-2015-88156.1 Medium
- umbracoUmbraco CMS vulnerable to CSRFCVE-2015-8814Fix available8.8 High
- umbracoUmbraco CMS vulnerable to CSRFCVE-2015-8813Fix availableEPSS 11.2%8.2 High
- umbraco cmsThe update function in umbraco.webservices/templates/templateService.cs in the TemplateService...CVE-2013-47937.5 High