CVE-2016-8855

Cross-Site Scripting (XSS) in "/sitecore/client/Applications/List Manager/Taskpages/Contact list" in Sitecore Experience Platform 8.1 rev

published March 19, 2017

CVSS
—
EPSS
2%
Percentile
82.1
In the wild
Unconfirmed
What it is

Cross-Site Scripting (XSS) in "/sitecore/client/Applications/List Manager/Taskpages/Contact list" in Sitecore Experience Platform 8.1 rev. 160519 (8.1 Update-3) allows remote attacks via the Name or Description parameter. This is fixed in 8.2 Update-2.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02186 · 82.1th percentile
Published
2017-03-19T18:00Z
EPSS history
Timeline
  • 19 MAR 18:00Z
    Cross-Site Scripting (XSS) in "/sitecore/client/Applications/List Manager/Taskpages/Contact list" in Sitecore Experience Platform 8.1 rev
    cvelistv5