Umbraco CMS Vulnerable to Stored XSS on Content Page Through Markdown Editor Preview Pane
ImpactStored Cross-site scripting (XSS) enable attackers that have access to backoffice to bring malicious content into a website or application.Affected versionsUmbraco CMS >= 8.00PatchesThis is fixed in 8.18.13, 10.8.4, 12.3.7, 13.1.1 by implementing IHtmlSanitizer