Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-xxc6-35r7-796w: Possible injection of HTML into user invite mails

Impact

A user with access to a specific part of the backoffice is able to inject HTML code into a form where it is not intended.

ghsa
#git

Possible injection of HTML into user invite mails

Low severity GitHub Reviewed Published Dec 12, 2023 in umbraco/Umbraco-CMS • Updated Dec 13, 2023

ghsa: Latest News

GHSA-j4rc-96xj-gvqc: phpMyFAQ: Public API endpoints expose emails and invisible questions