Vulnerabilities > Sitecore > Sitecore NET > Medium

DATE CVE VULNERABILITY TITLE RISK
2017-06-23 CVE-2017-9356 Cross-site Scripting vulnerability in Sitecore Sitecore.Net 7.1/7.2
Sitecore.NET 7.1 through 7.2 has a Cross Site Scripting Vulnerability via the searchStr parameter to the /Search-Results URI.
network
low complexity
sitecore CWE-79
6.1