UC
Product
Umbraco CMS
by · last CVE Dec 30, 2020
3
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 3Low 0
Watch

Add Umbraco CMS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-5811
6.5
9%
Dec 30
An authenticated path traversal vulnerability exists during package installation in Umbraco CMS <= 8.9.1 or current, which could result in arbitrary files being written outside of…
Affected: <= 8.9.1 or current (unfixed)
CVE-2020-5809
5.4
1%
Dec 30
A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current
Affected: <= 8.9.1 or current (unfixed)
CVE-2020-5810
5.4
62%
Dec 30
A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current
Affected: <= 8.9.1 or current (unfixed)
Showing 3