CVE-2017-18177

Progress Sitefinity 9.1 has XSS via the Last name, First name, and About fields on the New User Creation Page. This is fixed in 10.1.

Score

CVSS 3.0 5.4 Medium

Status

Modified - cve@mitre.org

Published

2018-02-12

Last modified

2024-09-16

Weaknesses

CWE-79

Affected products

• Sitefinity (Progress)

References

• https://packetstormsecurity.com/files/143894/Progress-Sitefinity-9.1-XSS-Session-Management-Open-Redirect.html
• https://www.sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-progress-sitefinity/index.html