CVE-2018-17056: XSS
Cross-site scripting (XSS) vulnerability in ServiceStack in Progress Sitefinity CMS versions 10.2 through 11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-17056?
CVE-2018-17056 is a cross-site scripting (XSS) vulnerability in ServiceStack in Progress Sitefinity CMS versions 10.2 through 11.0.
How severe is CVE-2018-17056?
CVE-2018-17056 has a severity rating of 6.1 (Medium).
How does CVE-2018-17056 affect Progress Sitefinity CMS?
CVE-2018-17056 allows remote attackers to inject arbitrary web script or HTML into Progress Sitefinity CMS.
What is the Common Weakness Enumeration (CWE) of CVE-2018-17056?
CVE-2018-17056 is categorized as CWE-79, which is a vulnerability related to cross-site scripting (XSS).
How can I fix CVE-2018-17056?
To fix CVE-2018-17056, it is recommended to update to a version of Progress Sitefinity CMS that is not affected by this vulnerability, such as version 11.0 or higher.