CVE-2024-1636: Potential Cross-Site Scripting (XSS) in the page editing area
Published Feb 28, 2024
·Updated
Potential Cross-Site Scripting (XSS) in the page editing area.
Affected Software
3 affected components
Progress Sitefinity<13.3.7649
Progress Sitefinity>=14.0<14.4.8135
Progress Sitefinity>=15.0.8200<15.0.8227
Event History
Feb 28, 2024
CVE Published
via MITRE·12:05 PM
Data Sourced
via MITRE·12:05 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-1636?
CVE-2024-1636 is classified as a potential Cross-Site Scripting (XSS) vulnerability.
2
How do I fix CVE-2024-1636?
To fix CVE-2024-1636, upgrade your Progress Sitefinity to a version beyond 13.3.7649 or between 14.0 and 14.4.8135 or between 15.0.8200 and 15.0.8227.
3
What software is affected by CVE-2024-1636?
CVE-2024-1636 affects Progress Sitefinity versions up to 13.3.7649 and certain ranges of versions from 14.0 to 14.4.8135 and from 15.0.8200 to 15.0.8227.
4
What is Cross-Site Scripting (XSS) vulnerability in CVE-2024-1636?
Cross-Site Scripting (XSS) vulnerability in CVE-2024-1636 allows attackers to inject malicious scripts into the webpage, potentially compromising user data.
5
Can CVE-2024-1636 be exploited remotely?
Yes, CVE-2024-1636 can be exploited remotely by an attacker with access to the page editing area.