Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current. An authenticated user can inject arbitrary JavaScript code into iframes when editing content using the TinyMCE rich-text editor, as TinyMCE is configured to allow iframes by default in Umbraco CMS.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Umbraco 跨站脚本漏洞
Vulnerability Description
Umbraco是丹麦Umbraco公司的一套C#编写的开源的内容管理系统（CMS）。 Umbraco CMS 8.9.1版本及之前版本存在跨站脚本漏洞，该漏洞允许经过身份验证的用户可以在使用TinyMCE富文本编辑器编辑内容时将任意JavaScript代码注入到iframes中，因为TinyMCE被配置为默认允许在Umbraco CMS中使用iframes。
CVSS Information
N/A
Vulnerability Type
N/A