Unrated severityNVD Advisory· Published Sep 3, 2025· Updated Sep 3, 2025
HTML Cache Poisoning through Unsafe Reflections
CVE-2025-53693
Description
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Cache Poisoning.This issue affects Sitecore Experience Manager (XM): from 9.0 through 9.3, from 10.0 through 10.4; Experience Platform (XP): from 9.0 through 9.3, from 10.0 through 10.4.
Affected products
4- Range: >= 9.0.0, <= 9.3.0 || >= 10.0.0, <= 10.4.0
- Range: >= 9.0.0, <= 9.3.0 || >= 10.0.0, <= 10.4.0
- Sitecore/Experience Platform (XP)v5Range: 9.0
- Sitecore/Sitecore Experience Manager (XM)v5Range: 9.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.