exploit/windows/http/sitecore_xp_cve_2025_34511

weaponized

Sitecore XP CVE-2025-34511 Post-Authentication File Upload

view exploit source metasploittype exploitpublished 2025-06-17catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-34511US	—	30.4% (98th)	Exploit	2025-06-17
Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager (XM) and Experience Platform (XP), through version 7.0 is vulnerable to an unrestricted file upload issue.…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.