CVE-2024-47819
1 advisory.
npm/@umbraco-cms/backoffice CVE-2024-47819: medium 4.2, EPSS 0.35%
Umbraco CMS vulnerable to stored Cross-site Scripting in the "dictionary name" on Dictionary section
Action: Upgrade @umbraco-cms/backoffice to 14.3.1 or later.
npm i @umbraco-cms/backoffice@14.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 14.0.0 | 14.3.1 | - |
Fixed versions
| 14.3.1 |
Sources
- osv: GHSA-c5g6-6xf7-qxp3
- https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-c5g6-6xf7-qxp3
- https://nvd.nist.gov/vuln/detail/CVE-2024-47819
- https://github.com/umbraco/Umbraco-CMS
CVE-2024-47819 · published · modified · JSON