medium6.1
CVE-2017-9356
Sitecore.NET 7.1 through 7.2 has a Cross Site Scripting Vulnerability via the searchStr parameter to the /Search-Results URI.
Impact
Sitecore.NET 7.1 through 7.2 has a Cross Site Scripting Vulnerability via the searchStr parameter to the /Search-Results URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sitecore | Sitecore.Net | Versions 7.1, 7.2 |