Sitefinity CMS 9.2 - Cross-Site Scripting









# Exploit Title: Stored Cross Site Scripting (XSS) in Progress  Sitefinity CMS 9.2
# Date: Aug 31, 2017
# Exploit Author: Pralhad Chaskar
# Vendor Homepage:
# Tested on: Progress Sitefinity CMS 9.2 and lower
# CVE : NA

Vendor Description
Progress® Sitefinity™ is a content management and marketing analytics platform designed to maximize the agility needed to succeed in today’s rapidly changing digital marketplace. It provides developers and IT teams the tools they need to support enterprise-level digital marketing, optimizing the customer journey by delivering seamless personalized experiences across different technologies and devices. Progress is a trusted source for the digital marketing innovation needed to create transformative customer experiences that fuel business success.

Cross-Site Scripting (XSS) attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted web sites. XSS attacks occur when an attacker uses a web application to send malicious code, generally in the form of a browser side script, to a different end user.

Vulnerability Class
Cross-site Scripting (XSS) -

Proof of Concept
Below mentioned input fields aren't properly escaped. This could lead to an XSS attack that could possibly affect administrators, users, editor.
Parameter : Page Title
Method: POST
Parameter : News Title
Method: POST
Parameter : List Title
Method: POST
Parameter : Document Title
Method: POST
Parameter : Image Title
Method: POST
Parameter : Link Title
Method: POST
Parameter : Video Title
Method: POST

Vendor Contact Timeline
Discovered: October 16, 2016
Vendor Notification: October 18, 2016
Advisory Publication: Aug 31, 2017
Public Disclosure: Aug 31, 2017

Affected Targets
Sitefinity CMS 9.2 and lower

Upgrade to Sitefinity CMS 10.1 to fix this issue.

Pralhad Chaskar
Information Security Analyst
Help AG Middle East

[1] Help AG Middle East
[2] Sitefinity CMS Version Notes