CVE-2017-18639: XSS
Progress Sitefinity CMS before 10.1 allows XSS via /Pages Parameter : Page Title, /Content/News Parameter : News Title, /Content/List Parameter : List Title, /Content/Documents/LibraryDocuments/incident-request-attachments Parameter : Document Title, /Content/Images/LibraryImages/newsimages Parameter : Image Title, /Content/links Parameter : Link Title, /Content/links Parameter : Link Title, or /Content/Videos/LibraryVideos/default-video-library Parameter : Video Title.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2017-18639.
What is the severity of CVE-2017-18639?
The severity of CVE-2017-18639 is medium with a severity value of 6.1.
What is the affected software of CVE-2017-18639?
The affected software of CVE-2017-18639 is Progress Sitefinity CMS before 10.1.
How does CVE-2017-18639 allow XSS?
CVE-2017-18639 allows XSS via multiple parameters, such as /Pages Parameter : Page Title, /Content/News Parameter : News Title, /Content/List Parameter : List Title, /Content/Documents/LibraryDocuments/incident-request-attachments Parameter : Document Title, /Content/Images/LibraryImages/newsimages Parameter.
Is there a patch or fix available for CVE-2017-18639?
Yes, upgrading Progress Sitefinity CMS to version 10.1 or higher will fix CVE-2017-18639.