← All advisories

Critical severity9.8NVD Advisory· Published Oct 2, 2019· Updated Jun 17, 2026

CVE-2019-13957

CVE-2019-13957

Description

In Umbraco 7.3.8, there is SQL Injection in the backoffice/PageWApprove/PageWApproveApi/GetInpectSearch method via the nodeName parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Umbraco/Umbraco CMS2 versions
cpe:2.3:a:umbraco:umbraco:7.3.8:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:umbraco:umbraco:7.3.8:*:*:*:*:*:*:*
- (no CPE)range: 7.3.8
Umbraco/Umbracodescription

Patches

Vulnerability mechanics

References

2

gist.github.com/shiham101/d1de44d1dcf2c33d401ef2f8cbb04f9fnvdThird Party Advisory
our.umbraco.com/download/releases/738/nvdVendor Advisory

News mentions

0

No linked articles in our index yet.