CVE-2017-18175

2022-10-0316:23:14

mitre

www.cve.org

progress sitefinity

xss

templateconfiguration

content management

img element

cve-2017-18175

0.001 Low

EPSS

Percentile

34.6%

JSON

Progress Sitefinity 9.1 has XSS via the Content Management Template Configuration (aka Templateconfiguration), as demonstrated by the src attribute of an IMG element. This is fixed in 10.1.

References

packetstormsecurity.com/files/143894/Progress-Sitefinity-9.1-XSS-Session-Management-Open-Redirect.html

www.sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-progress-sitefinity/index.html

0.001 Low

EPSS

Percentile

34.6%

JSON

Related for CVELIST:CVE-2017-18175