description: Persistent cross-site scripting (XSS) vulnerability in Umbraco CMS 7.12.3 allows authenticated users to inject arbitrary web script via the Header Name of a content (Blog, Content Page, etc.). The vulnerability is exploited when updating or removing public access of a content.
problem types: Persistent cross-site scripting
affected:
{
product: UmbracoCMS
vendor: CyberSecurity Philippines - CERT
versions:
status: affected, version: 7.12.3
}