CVE-2023-27636: Sitefinity 15.0 - Cross-Site Scripting (XSS)
Published Jun 3, 2024
·Updated
Progress Sitefinity before 15.0.0 allows XSS by authenticated users via the content form in the SF Editor.
Credit
Aldi Saputra Wahyudi
Affected Software
1 affected component
Progress Sitefinity<15.0.0
Event History
Jun 3, 2024
Exploit Published
via ExploitDB·12:00 AM
Known Exploited
via ExploitDB·12:00 AM
Jun 16, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-27636?
CVE-2023-27636 is considered a high severity vulnerability due to its potential for XSS attacks by authenticated users.
2
How do I fix CVE-2023-27636?
To fix CVE-2023-27636, upgrade to Progress Sitefinity version 15.0.0 or later.
3
Who is affected by CVE-2023-27636?
CVE-2023-27636 affects all versions of Progress Sitefinity prior to 15.0.0.
4
What type of vulnerability is CVE-2023-27636?
CVE-2023-27636 is an XSS (cross-site scripting) vulnerability.
5
Can CVE-2023-27636 be exploited without authentication?
No, CVE-2023-27636 can only be exploited by authenticated users.