Medium severity5.4NVD Advisory· Published Jul 17, 2019· Updated Jun 17, 2026
CVE-2019-13493
CVE-2019-13493
Description
In Sitecore 9.0 rev 171002, Persistent XSS exists in the Media Library and File Manager. An authenticated unprivileged user can modify the uploaded file extension parameter to inject arbitrary JavaScript.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:sitecore:experience_platform:9.0:*:*:*:*:*:*:*
- Sitecore/Sitecoredescription
- Range: 9.0 rev 171002
Patches
Vulnerability mechanics
References
1- packetstormsecurity.com/files/153613/Sitecore-9.0-Rev-171002-Cross-Site-Scripting.htmlnvdExploitThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.