EDB-47106

PoC

Sitecore 9.0 rev 171002 - Persistent Cross-Site Scripting

view exploit source exploit_dbtype webappsauthor Owais Mehtabpublished 2019-07-11catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2019-13493US	medium5.4	1.58% (75th)	Exploit	2019-07-17
In Sitecore 9.0 rev 171002, Persistent XSS exists in the Media Library and File Manager. An authenticated unprivileged user can modify the uploaded file extension parameter to inje…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.