CVE-2024-47819: Umbraco CMS vulnerable to stored Cross-site Scripting in the "dictionary name" on Dictionary section
This can be leveraged to gain access to higher-privilege endpoints, e.g. if you get a user with admin privileges to run the code, you can potentially elevate all users and grant them admin privileges or access protected content.
References
Detect and mitigate CVE-2024-47819 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →