UpHeron
All vulnerabilities

Servers and applications

CVE-2019-25137

Umbraco CMS 4.11.8 through 7.15.10, and 7.12.4, allows Remote Code Execution by authenticated administrators via msxsl:script in an xsltSelection to developer/Xslt/xsltVisualize.aspx.

Severity
High 7.2
Published
18 May 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Umbraco CMSServers and applications · cpe:a:umbraco:umbraco_cms
  • From 4.11.8 up to 7.15.10

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-25137
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-25137