Security Advisory
CVE-2017-9356
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Sitecore.NET 7.1 through 7.2 has a Cross Site Scripting Vulnerability via the searchStr parameter to the /Search-Results URI.