CVE-2016-8855
Cross-Site Scripting (XSS) in "/sitecore/client/Applications/List Manager/Taskpages/Contact list" in Sitecore Experience Platform 8.1 rev. 160519 (8.1 Update-3) allows remote attacks via the Name or Description parameter. This is fixed in 8.2 Update-2.
- Affected products
- Sitecore Experience Platform
- Sitecore Experience Platform
- = 8.1
- Fix
- Available
- CVSS 3.0
- 6.1 MEDIUM
- EPSS
- 2.2% (81th percentile)
- Weakness
- CWE-79
- NVD status
- Modified
- Published
- 2017-03-19
CVE-2016-8855 at NVD
5 known exploits for CVE-2016-8855
Proof-of-concept code and exploit modules indexed by Sploitus
Sitecore Experience Platform 8.1 Update-3 Cross Site Scripting Vulnerability
Sitecore CMS 8.1 Update-3 - Cross-Site Scripting Vulnerability
Sitecore CMS 8.1 Update-3 - Cross-Site Scripting
Sitecore CMS 8.1 Update-3 - Cross-Site Scripting
Sitecore Experience Platform 8.1 Update-3 Cross Site Scripting