CVE-2024-1636

MEDIUM 5.4CVE-2024-1636 · Published 28/02/2024 · updated 17/06/2026

In short

CVE-2024-1636 is a MEDIUM (CVSS 5.4) vulnerability affecting sitefinity (progress).
Chance of exploitation in the next 30 days (EPSS): 0.40%, higher than 34.2% of all vulnerabilities.
Fix: update to 14.4.8135, 15.0.8227, 13.3.7649 or later.

Package	Affected versions	Patched versions
sitefinity progress	`≥ 14.0, < 14.4.8135≥ 15.0.8200, < 15.0.8227< 13.3.7649`	`14.4.813515.0.822713.3.7649`

Potential Cross-Site Scripting (XSS) in the page editing area.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

≥ 14.0, < 14.4.8135≥ 15.0.8200, < 15.0.8227< 13.3.7649

14.4.813515.0.822713.3.7649

More vulnerabilities in sitefinity

See all →