3 matches found
CVE-2024-1636
Potential Cross-Site Scripting (XSS) in the page editing area.
CVE-2024-1632
Low-privileged users with access to the Sitefinity backend may obtain sensitive information from the site's administrative area.
CVE-2023-27636
Progress Sitefinity before 15.0.0 allows XSS by authenticated users via the content form in the SF Editor.