Sitefinity

0

SINGLE_NUMBER 1 CVE

14.4.8100

SEMANTIC 1 CVE

13.3.7600

SEMANTIC 1 CVE

15.2.8421

SEMANTIC 1 CVE

15.1.8327

SEMANTIC 1 CVE

15.0.8200

SEMANTIC 2 CVEs

15.0.8229

SEMANTIC 1 CVE

14.4.8142

SEMANTIC 1 CVE

15.1.8300

SEMANTIC 1 CVE

4.0

MAJOR_MINOR 1 CVE

15.2.8400

SEMANTIC 1 CVE

CVE-2024-11627

: Insufficient Session Expiration vulnerability in Progress Sitefinity allows : Session Fixation.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1.8300 through 15.1.8327, from 15.2.8400 through 15.2.8421.

MEDIUM Jan 07, 2025

CVE-2023-27636

Progress Sitefinity before 15.0.0 allows XSS by authenticated users via the content form in the SF Editor.

MEDIUM Jun 16, 2024

CVE-2024-1636

Potential Cross-Site Scripting (XSS) in the page editing area.

HIGH Feb 28, 2024