Medium · 5.4 CVE-2023-29376 EUVD-2023-32948GHSA-qmvc-wj32-3pg9

An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2 before 14.2.7930, …

Published Apr 10, 2023 · Updated Feb 11, 2025 · Assigned by mitre

Description

An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2 before 14.2.7930, and 14.3 before 14.3.8025. There is potential XSS by privileged users in Sitefinity to media libraries.

Advisories 1

WID-SEC-2023-0885 Progress Software Sitefinity: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 10, 2023

References

https://www.progress.com/sitefinity-cms
https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-April-2023