CVE-2019-13493
In Sitecore 9.0 rev 171002, Persistent XSS exists in the Media Library and File Manager. An authenticated unprivileged u
In Sitecore 9.0 rev 171002, Persistent XSS exists in the Media Library and File Manager. An authenticated unprivileged user can modify the uploaded file extension parameter to inject arbitrary JavaScript.
MEDIUM · CVSS 5.4
EPSS 0.00188
Schedule remediation
- Public exploit or PoC is available
Sigma rules0
YARA rules0