Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2026-23880

OnboardLite has stored Cross-site Scripting issue that may lead to admin Account Take Over

Description

OnboardLite is a comprehensive membership lifecycle platform built for student organizations at the University of Central Florida. Versions of the software prior to commit 1d32081a66f21bcf41df1ecb672490b13f6e429f have a stored cross-site scripting vulnerability that can be rendered to an admin when they attempt to migrate a user's discord account in the dashboard. Commit 1d32081a66f21bcf41df1ecb672490b13f6e429f patches the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HackUCF OnboardLite

  • < 1d32081a66f21bcf41df1ecb672490b13f6e429faffected

References