CVE-2023-48313

Umbraco CMS (ASP.NET) is affected by a DOM-based XSS vulnerability identified as CVE-2023-48313. The issue exists from version 10.0.0 up to but not including 10.8.1 and 12.3.4, where it is mitigated by a patch. Affected component/functionality is not explicitly named in the provided documents bey...

PT-2023-30776 · Umbraco · Umbraco

Name of the Vulnerable Software and Affected Versions: Umbraco versions 10.0.0 through 10.8.0 Umbraco versions 10.8.1 is not affected, but versions prior to 12.3.4 are affected, so the correct range is: Umbraco versions 10.8.2 through 12.3.3 Description: The issue is a cross-site scripting XSS...