Cross site scripting

2018-10-0318:29:00

PRIOn knowledge base

www.prio-n.com

0.002 Low

EPSS

Percentile

53.7%

JSON

Cross-site scripting (XSS) vulnerability in Identity Server in Progress Sitefinity CMS versions 10.0 through 11.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to login request parameters, a different vulnerability than CVE-2018-17053.

CPENameOperatorVersion
sitefinity_cmsge10.0
sitefinity_cmsle11.0

CPE	Name	Operator	Version
	sitefinity_cms	ge	10.0
	sitefinity_cms	le	11.0

References

insinuator.net/2018/10/vulnerabilities-in-sitefinity-wcms-a-success-story-of-a-responsible-disclosure-process/

knowledgebase.progress.com/articles/Article/Security-Advisory-for-Resolving-Security-vulnerabilities-September-2018

0.002 Low

EPSS

Percentile

53.7%

JSON

Related for PRION:CVE-2018-17054