Vulnerabilities > Sitecore > Low

DATE CVE VULNERABILITY TITLE RISK
2019-07-17 CVE-2019-13493 Cross-site Scripting vulnerability in Sitecore Experience Platform 9.0
In Sitecore 9.0 rev 171002, Persistent XSS exists in the Media Library and File Manager.
network
sitecore CWE-79
3.5
3.5
2017-07-19 CVE-2017-11439 Cross-site Scripting vulnerability in Sitecore CMS 8.2
In Sitecore 8.2, there is reflected XSS in the shell/Applications/Tools/Run Program parameter.
network
sitecore CWE-79
3.5
3.5