CVE-2024-1636
published 2024-02-28CVE-2024-1636: Potential Cross-Site Scripting (XSS) in the page editing area.
PriorityP422medium5.4CVSS 3.1
AVNACLPRLUIRSCCLILAN
EPSS
0.40%
31.8th percentile
Potential Cross-Site Scripting (XSS) in the page editing area.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| progress | sitefinity | < 13.3.7649 | 13.3.7649 |
| progress | sitefinity | >= 14.0 < 14.4.8135 | 14.4.8135 |
| progress | sitefinity | >= 15.0.8200 < 15.0.8227 | 15.0.8227 |
| progress_software_corporation | sitefinity | >= 13.3.7600 < 13.3.7649 | 13.3.7649 |
| progress_software_corporation | sitefinity | >= 14.4.8100 < 14.4.8135 | 14.4.8135 |
| progress_software_corporation | sitefinity | >= 15.0.8200 < 15.0.8227 | 15.0.8227 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-CVE-2024-1632-and-CVE-2024-1636-February-2024https://www.progress.com/sitefinity-cmshttps://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-CVE-2024-1632-and-CVE-2024-1636-February-2024https://www.progress.com/sitefinity-cms
2024-02-28
Published