Skip to content

Product

umbraco CMS vulnerabilities

2 published CVES affecting umbraco CMS, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
1
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest umbraco CMS CVEs

Newest publication first

  1. CVE-2012-10054 Umbraco CMS < 4.7.1 codeEditorSave.asmx RCE

    Published
    CriticalCVSS 9.3 EPSS 4.3% Framework module

    Umbraco CMS versions prior to 4.7.1 are vulnerable to unauthenticated remote code execution via the codeEditorSave.asmx SOAP endpoint, which exposes a SaveDLRScript operation that permits arbitrary file uploads without authentication. By exploiting a path traversal flaw in the fi...

  2. CVE-2024-10761 Umbraco CMS Dashboard frame cross site scripting

    Published
    MediumCVSS 6.9 EPSS 0.61%

    A vulnerability was found in Umbraco CMS up to 10.7.7/12.3.6/13.5.2/14.3.1/15.1.1. It has been classified as problematic. Affected is an unknown function of the file /Umbraco/preview/frame?id{} of the component Dashboard. The manipulation of the argument culture leads to cross si...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.