CVE-2013-0741 Cross-site scripting (XSS) vulnerability in imagegen.ashx in Percipient Studios ImageGen before 2.9.0 for Umbraco CMS allows remote attackers to inject arbitrary web script or HTML via the font parame...
MediumCVSS 4.3
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in imagegen.ashx in Percipient Studios ImageGen before 2.9.0 for Umbraco CMS allows remote attackers to inject arbitrary web script or HTML via the font parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| percipientstudios imagen | <= 2.5.7 | No fix listed |
| percipientstudios imagen | = 2.5.1 | No fix listed |
| percipientstudios imagen | = 2.5.2 | No fix listed |
| percipientstudios imagen | = 2.5.3 | No fix listed |
| percipientstudios imagen | = 2.5.4 | No fix listed |
| percipientstudios imagen | = 2.5.5 | No fix listed |
| percipientstudios imagen | = 2.5.6 | No fix listed |
References
- 99343 vdb-entry
- our.umbraco.org patch
- 52771 third-party-advisory vendor-advisory