UpHeron
All vulnerabilities

Servers and applications

CVE-2019-13493

In Sitecore 9.0 rev 171002, Persistent XSS exists in the Media Library and File Manager. An authenticated unprivileged user can modify the uploaded file extension parameter to inject arbitrary JavaScript.

Severity
Medium 5.4
Published
17 Jul 2019
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
1.6% in the next 30 daysHigher than 75% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Sitecore Experience PlatformServers and applications · cpe:a:sitecore:experience_platform
  • Version 9.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-13493
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-13493