Security Advisory

CVE-2022-4979

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-07-25 15:55:36

Last updated 2026-03-23 15:43:29

Assigner VulnCheck

CVSS score 5.1

State PUBLISHED

Description

A cross-site scripting (XSS) vulnerability exists in Sitecore Experience Platform (XP) 7.5 - 10.2 and CMS 7.2 - 7.2 Update-6 that may allow authenticated Sitecore Shell users to be tricked into executing custom JS code. Managed Cloud Standard customers who run the affected Sitecore Experience Platform / CMS versions are also affected.

← Browse all CVEs View on cve.org ↗