medium5.4Public exploit code
CVE-2023-27636
Progress Sitefinity before 15.0.0 allows XSS by authenticated users via the content form in the SF Editor.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sitefinity 15.0 - Cross-Site Scripting (XSS)2024-06-03 · webapps · multiple
Impact
Progress Sitefinity before 15.0.0 allows XSS by authenticated users via the content form in the SF Editor.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Progress | Sitefinity | before 15.0.0 |