What’s Vulnerable › Vulnerabilities

CVE-2019-13957

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-10-02 · updated 2026-06-17
• Weakness: CWE-89

Description

In Umbraco 7.3.8, there is SQL Injection in the backoffice/PageWApprove/PageWApproveApi/GetInpectSearch method via the nodeName parameter.

Affected products

• Umbraco: 7.3.8

References

• https://gist.github.com/shiham101/d1de44d1dcf2c33d401ef2f8cbb04f9f
• https://our.umbraco.com/download/releases/738/
• https://gist.github.com/shiham101/d1de44d1dcf2c33d401ef2f8cbb04f9f
• https://our.umbraco.com/download/releases/738/

Get alerted when CVE-2019-13957 or the next vulnerability affects your stack