CVE-2023-27636

Progress Sitefinity before 15.0.0 allows XSS by authenticated users via the content form in the SF Editor...

CVE-2023-27636

Progress Sitefinity before 15.0.0 allows XSS by authenticated users via the content form in the SF Editor...

PT-2024-12145 · Progress · Sitefinity

Name of the Vulnerable Software and Affected Versions: Progress Sitefinity versions prior to 15.0.0 Description: The issue allows cross-site scripting XSS by authenticated users through the content form in the SF Editor. This can potentially lead to malicious script execution. Recommendations: Fo...