CVE-2023-27636

Progress Sitefinity before 15.0.0 allows XSS by authenticated users via the content form in the SF Editor...

CVE-2023-27636

Progress Sitefinity before 15.0.0 allows Cross‑Site Scripting (XSS) by authenticated users via the SF Editor’s content form. Affected component: SF Editor in Sitefinity; vulnerability arises in input handling within the editor, enabling script execution when payloads are submitted and viewed. Imp...

PT-2024-12145 · Progress · Sitefinity

Name of the Vulnerable Software and Affected Versions: Progress Sitefinity versions prior to 15.0.0 Description: The issue allows cross-site scripting XSS by authenticated users through the content form in the SF Editor. This can potentially lead to malicious script execution. Recommendations: Fo...

Sitefinity 15.0 - Cross-Site Scripting Vulneraility

Exploit Title: Sitefinity 15.0 - Cross-Site Scripting XSS Exploit Author: Aldi Saputra Wahyudi Vendor Homepage: https://www.progress.com/sitefinity-cms Version:...

Sitefinity 15.0 Cross Site Scripting

Exploit Title: Sitefinity 15.0 - Cross-Site Scripting XSS Date: 2023-12-05 Exploit Author: Aldi Saputra Wahyudi Vendor Homepage: https://www.progress.com/sitefinity-cms Version:...

Sitefinity 15.0 - Cross-Site Scripting (XSS)

Exploit Title: Sitefinity 15.0 - Cross-Site Scripting XSS Date: 2023-12-05 Exploit Author: Aldi Saputra Wahyudi Vendor Homepage: https://www.progress.com/sitefinity-cms Version:...

CVE-2024-1632

Low-privileged users with access to the Sitefinity backend may obtain sensitive information from the site's administrative area...

Information disclosure

Low-privileged users with access to the Sitefinity backend may obtain sensitive information from the site's administrative area...

CVE-2024-1632 Incorrect access control in the Sitefinity backend

Low-privileged users with access to the Sitefinity backend may obtain sensitive information from the site's administrative area...

CVE-2024-1632

CVE-2024-1632 is a vulnerability in Progress Sitefinity CMS where low-privileged users with backend access can obtain sensitive information from the administrative area. The connected sources confirm the issue affects the Sitefinity backend and constitutes an information disclosure (confidentiali...

Progress Sitefinity Security Breach

Progress Sitefinity is an open source platform for building corporate websites and intranets. A security vulnerability exists in Progress Sitefinity, which can be exploited to obtain sensitive information through the site administrative area by a user with access to the Sitefinity backend...

Progress Sitefinity Cross-Site Scripting Vulnerability

Progress Sitefinity is an open source platform for building corporate websites and intranets. A cross-site scripting vulnerability exists in Progress Sitefinity due to cross-site scripting in the page editing area...

PT-2024-18184 · Progress · Sitefinity

Name of the Vulnerable Software and Affected Versions: Sitefinity affected versions not specified Description: The issue concerns a potential Cross-Site Scripting XSS in the page editing area, which may allow low-privileged users with access to the Sitefinity backend to obtain sensitive informati...

PT-2024-18180 · Progress · Sitefinity

Name of the Vulnerable Software and Affected Versions: Sitefinity affected versions not specified Description: Low-privileged users with access to the Sitefinity backend may obtain sensitive information from the site's administrative area. Recommendations: At the moment, there is no information...

CVE-2023-6784

A malicious user could potentially use the Sitefinity system for the distribution of phishing emails...

CVE-2023-6784

A malicious user could potentially use the Sitefinity system for the distribution of phishing emails...

CVE-2023-6784 Potential Use of the Sitefinity System for Distribution of Phishing Emails

A malicious user could potentially use the Sitefinity system for the distribution of phishing emails...

CVE-2023-6784 Potential Use of the Sitefinity System for Distribution of Phishing Emails

A malicious user could potentially use the Sitefinity system for the distribution of phishing emails...

CVE-2023-6784

Progress Sitefinity (the platform referenced across multiple sources) has a reported input validation error vulnerability associated with CVE-2023-6784 that could enable a malicious user to use the system to distribute phishing emails. The connected documents describe the issue as an input valida...

Progress Sitefinity Input Validation Error Vulnerability

Progress Sitefinity is an open source platform for building corporate websites and intranets. Progress Sitefinity has an input validation error vulnerability that originates from a malicious user who may use the system to distribute phishing emails...