CVE-2017-18175

2018-02-1214:00:00

mitre

www.cve.org

progress sitefinity

xss

templateconfiguration

content management

img element

cve-2017-18175

EPSS

0.001

Percentile

45.8%

JSON

Progress Sitefinity 9.1 has XSS via the Content Management Template Configuration (aka Templateconfiguration), as demonstrated by the src attribute of an IMG element. This is fixed in 10.1.

References

packetstormsecurity.com/files/143894/Progress-Sitefinity-9.1-XSS-Session-Management-Open-Redirect.html

www.sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-progress-sitefinity/index.html

EPSS

0.001

Percentile

45.8%

JSON

Related for CVELIST:CVE-2017-18175