CVE-2023-48313

    Dashboard / Vulnerabilities / CVE-2023-48313

    CVE-2023-48313

    Published: 12 Dec 2023Last Modified: 28 Oct 2026

    Summary: Umbraco contains a DOM-XSS

    Details: Umbraco is an ASP.NET content management system (CMS). Starting in 10.0.0 and prior to versions 10.8.1 and 12.3.4, Umbraco contains a cross-site scripting (XSS) vulnerability enabling attackers to bring malicious content into a website or application. Versions 10.8.1 and 12.3.4 contain a patch for this issue.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/48xxx/CVE-2023-48313.json, https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-v98m-398x-269r, https://nvd.nist.gov/vuln/detail/CVE-2023-48313

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- e3f4b86f1c28e0ec30a1ad2a079e308af4cbfbf7
    Fixed -4a7ad4a562e7f07641d4a33cd246509f4ab59cd8

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-48313 | CVE-DB