Only if your front end is SPA and backend just serves through data via api. even...

sakshyamshah on Nov 23, 2017 | parent | context | favorite | on: Looking at how many sites use vulnerable JavaScrip...

Only if your front end is SPA and backend just serves through data via api. even in that case, xss in front-end can compromise admin's web sessions to pivot into backend services.