Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-xxc6-35r7-796w: Possible injection of HTML into user invite mails

Impact

A user with access to a specific part of the backoffice is able to inject HTML code into a form where it is not intended.

ghsa
#git

Possible injection of HTML into user invite mails

Low severity GitHub Reviewed Published Dec 12, 2023 in umbraco/Umbraco-CMS • Updated Dec 13, 2023

ghsa: Latest News

GHSA-x52f-h5g4-8qv5: Marp Core allows XSS by improper neutralization of HTML sanitization