A vulnerability was found in Progress Sitefinity CMS up to 14.x. It has been declared as problematic. This vulnerability affects unknown code of the component SF Editor. The manipulation leads to cross site scripting.

This vulnerability was named CVE-2023-27636. The attack can be initiated remotely. Furthermore, there is an exploit available.

It is recommended to upgrade the affected component.