CVE-2019-13493

In Sitecore 9.0 rev 171002, Persistent XSS exists in the Media Library and File Manager

published July 17, 2019

CVSS
—
EPSS
2%
Percentile
75.3
In the wild
Unconfirmed
What it is

In Sitecore 9.0 rev 171002, Persistent XSS exists in the Media Library and File Manager. An authenticated unprivileged user can modify the uploaded file extension parameter to inject arbitrary JavaScript.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01581 · 75.3th percentile
Published
2019-07-17T19:10Z
EPSS history
Timeline
  • 17 JUL 19:10Z
    In Sitecore 9.0 rev 171002, Persistent XSS exists in the Media Library and File Manager
    cvelistv5