Security Advisory
CVE-2017-18177
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Progress Sitefinity 9.1 has XSS via the Last name, First name, and About fields on the New User Creation Page. This is fixed in 10.1.