Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Progress Software Sitefinity — community.progress.com/s/article/Sitefinity-Security-Adviso… Clear all filters
TI-2024-01519 CVE-2024-1636 · GHSA-whfc-7h32-gf82

Cross-site scripting in Progress Sitefinity

Priority LOW 37

Potential Cross-Site Scripting (XSS) in the page editing area.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00399 Published 2024-02-28 Fixed in 13.3.7649, 14.4.8135 +1 CWE-79
TI-2024-01515 CVE-2024-1632 · GHSA-2q6p-h6rg-vx7w

Incorrect access control in the Sitefinity backend

Priority LOW 39

Low-privileged users with access to the Sitefinity backend may obtain sensitive information from the site's administrative area.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.005 Published 2024-02-28 Fixed in 13.3.7649, 14.4.8135 +1 CWE-284