https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T00:34:05.719474+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-215261 EUVD-2026-215261 2026-10-21T00:34:05.723115+00:00 EUVD-2026-215261 https://cve.radiocsirt.org/vuln/fkie_cve-2025-24012 fkie_cve-2025-24012 2026-10-21T00:34:05.723174+00:00

Umbraco is a free and open source .NET content management system. Starting in version 14.0.0 and prior to versions 14.3.2 and 15.1.2, authenticated users are able to exploit a cross-site scripting vulnerability when viewing certain localized backoffice components. Versions 14.3.2 and 15.1.2 contain a patch.

 https://cve.radiocsirt.org/vuln/ghsa-wv8v-rmw2-25wc GHSA-wv8v-rmw2-25wc — XSS/HTML Injection Vulnerability in Umbraco Backoffice Components 2026-10-21T00:34:05.723224+00:00

Affected: NuGet: Umbraco.Cms.StaticAssets, npm: @umbraco-cms/backoffice

### Impact Authenticated users are able to exploit an XSS vulnerability when viewing certain localized backoffice components.

### Patches Will be patched in 14.3.2 and 15.1.2.

Note: This issue was reported by Pratik Patil from NetSPI @Nexusss-ppatil