cbcvebase.

Sitecore Content Mangement System vulnerabilities

1 known vulnerability affecting sitecore/content_mangement_system.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2022-4979P4MEDIUMCVSS 5.1≥ 7.2 Initial Release, ≤ 7.2 Update-62025-07-25
CVE-2022-4979 [MEDIUM] CWE-79 CVE-2022-4979: A cross-site scripting (XSS) vulnerability exists in Sitecore Experience Platform (XP) 7.5 - 10.2 an A cross-site scripting (XSS) vulnerability exists in Sitecore Experience Platform (XP) 7.5 - 10.2 and CMS 7.2 - 7.2 Update-6 that may allow authenticated Sitecore Shell users to be tricked into executing custom JS code. Managed Cloud Standard customers who run the affected Sitecore Experience Platform / CMS versions are also affected.
nvd
Sitecore Content Mangement System vulnerabilities | cvebase