Cross-Site Scripting Vulnerability in Sitefinity CMS by Progress
CVE-2018-17056
6.1MEDIUM
What is CVE-2018-17056?
A cross-site scripting (XSS) vulnerability exists in ServiceStack within Progress Sitefinity CMS versions 10.2 to 11.0. This flaw allows remote attackers to inject arbitrary web scripts or HTML into affected systems through unidentified vectors, potentially compromising the integrity of the web application and exposing sensitive user data.