Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pfq2-75vc-mj87

Опубликовано: 07 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.4

Описание

Improper Neutralization of Input During CMS Backend (adminstrative section) Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Progress Sitefinity.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1.8300 through 15.1.8327, from 15.2.8400 through 15.2.8421.

Improper Neutralization of Input During CMS Backend (adminstrative section) Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Progress Sitefinity.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1.8300 through 15.1.8327, from 15.2.8400 through 15.2.8421.

EPSS

Процентиль: 23%
0.00079
Низкий

8.4 High

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 8.4
nvd
около 1 года назад

Improper Neutralization of Input During CMS Backend (adminstrative section) Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Progress Sitefinity.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1.8300 through 15.1.8327, from 15.2.8400 through 15.2.8421.

EPSS

Процентиль: 23%
0.00079
Низкий

8.4 High

CVSS3

Дефекты

CWE-79