CVE-2023-27636

This exploit demonstrates a stored XSS vulnerability in Sitefinity CMS versions prior to 15.0.0, where an attacker with lower privileges can inject malicious JavaScript payloads via the SF-Editor, which execute when a higher-privileged user views the affected page.