Security Advisory

CVE-2019-13493

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-07-17 19:10:51

Last updated 2024-08-04 23:57:39

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

In Sitecore 9.0 rev 171002, Persistent XSS exists in the Media Library and File Manager. An authenticated unprivileged user can modify the uploaded file extension parameter to inject arbitrary JavaScript.

← Browse all CVEs View on cve.org ↗