CVE-2016-8855 Cross-Site Scripting (XSS) in "/sitecore/client/Applications/List Manager/Taskpages/Contact list" in Sitecore Experience Platform 8.1 rev. 160519 (8.1 Update-3) allows remote attacks via the Name or D...
MediumCVSS 6.1
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-Site Scripting (XSS) in "/sitecore/client/Applications/List Manager/Taskpages/Contact list" in Sitecore Experience Platform 8.1 rev. 160519 (8.1 Update-3) allows remote attacks via the Name or Description parameter. This is fixed in 8.2 Update-2.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sitecore experience platform | = 8.1-rev._160519 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 41618 exploit third-party-advisory vdb-entry