CVE-2018-17056: Progress Sitefinity CMS

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in ServiceStack in Progress Sitefinity CMS versions 10.2 through 11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• Progress Sitefinity CMS: from 10.2, up to and including 11.0

Published 2018-09-28. Last modified 2026-06-17.