Medium severity4.8NVD Advisory· Published Nov 27, 2018· Updated Jun 17, 2026
CVE-2018-17256
CVE-2018-17256
Description
Persistent cross-site scripting (XSS) vulnerability in Umbraco CMS 7.12.3 allows authenticated users to inject arbitrary web script via the Header Name of a content (Blog, Content Page, etc.). The vulnerability is exploited when updating or removing public access of a content.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
umbracoNuGet | <= 7.12.3 | — |
Affected products
3- cpe:2.3:a:umbraco:umbraco_cms:7.12.3:*:*:*:*:*:*:*
- CyberSecurity Philippines - CERT/UmbracoCMSv5Range: 7.12.3
Patches
Vulnerability mechanics
References
3- github.com/advisories/GHSA-wrrj-r2j4-969wghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2018-17256ghsaADVISORY
- www.cspcert.ph/advisories/2018/CVE-2018-17256.htmlnvdThird Party Advisory
News mentions
0No linked articles in our index yet.