Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-xxc6-35r7-796w: Possible injection of HTML into user invite mails

Impact

A user with access to a specific part of the backoffice is able to inject HTML code into a form where it is not intended.

ghsa
#git

Possible injection of HTML into user invite mails

Low severity GitHub Reviewed Published Dec 12, 2023 in umbraco/Umbraco-CMS • Updated Dec 13, 2023

ghsa: Latest News

GHSA-2237-5r9w-vm8j: Connect-CMS information that is restricted to viewing is visible