Progress Software Corporation Sitefinity

• CVE-2025-1968 High 7.7 Insufficient Session Expiration vulnerability in Progress Software Corporation Sitefinity under some specific and uncommon circumstances allows reusing Session IDs (Session Replay Attacks).This issue 0.3%
• CVE-2024-11626 High 8.4 Improper Neutralization of Input During CMS Backend (adminstrative section) Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Progress Sitefinity.This issue affects Sitefinity: from 0.4%
• CVE-2024-11625 High 7.7 Information Exposure Through an Error Message vulnerability in Progress Software Corporation Sitefinity.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, fro 0.3%
• CVE-2024-4882 Medium 5.3 URL Redirection to Arbitrary Site Exists in Sitefinity 0.4%
• CVE-2024-1636 High 8.0 Potential Cross-Site Scripting (XSS) in the page editing area 0.4%
• CVE-2024-1632 High 8.8 Incorrect access control in the Sitefinity backend 0.5%
• CVE-2023-6784 Medium 4.7 Potential Use of the Sitefinity System for Distribution of Phishing Emails 0.4%