DOM-XSS on Backoffice login screen.

GHSA-v98m-398x-269r · CVE-2023-48313

Published Dec 13, 2023 · Modified Sep 10, 2026

AI SAST

Find this class of vulnerability in your own code

Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.

Explore AI SAST Explore dependency scanning →

Description

Impact

Cross-site scripting (XSS) enable attackers to bring malicious content into a website or application.

Explanation of the vulnerability

A DOM-XSS can be exploited when users are successfully logging into the Backoffice.

References

WEB https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-v98m-398x-269r
ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2023-48313
PACKAGE https://github.com/umbraco/Umbraco-CMS

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes