CVE-2023-27636

Progress Sitefinity before 15.0.0 allows XSS by authenticated users via the content form in the SF Editor

Medium · published June 16, 2024

CVSS v3.1
6.5
EPSS
1%
Percentile
70.0
In the wild
Unconfirmed
What it is

Progress Sitefinity before 15.0.0 allows XSS by authenticated users via the content form in the SF Editor.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01291 · 70.0th percentile
Published
2024-06-16T00:00Z
EPSS history
Timeline
  • 16 JUN 00:00Z
    Progress Sitefinity before 15.0.0 allows XSS by authenticated users via the content form in the SF Editor
    cvelistv5