Description
Progress Sitefinity 9.1 has XSS via file upload, because JavaScript code in an HTML file has the same origin as the application's own code. This is fixed in 10.1.
Unscored
CVE-2017-18176
EUVD-2017-9311GHSA-wqvj-w8h2-pwwr
Progress Sitefinity 9.1 has XSS via file upload, because JavaScript code in an HTML file has the same origin as the application's own code.…
Published Feb 12, 2018 · Updated Sep 16, 2024 · Assigned by mitre