Vulnerability Database

308,379

Total vulnerabilities in the database

CVE-2016-8855

Cross-Site Scripting (XSS) in "/sitecore/client/Applications/List Manager/Taskpages/Contact list" in Sitecore Experience Platform 8.1 rev. 160519 (8.1 Update-3) allows remote attacks via the Name or Description parameter. This is fixed in 8.2 Update-2.

  • Published: Mar 19, 2017
  • Updated: Nov 9, 2025
  • CVE: CVE-2016-8855
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
sitecore / experience_platform 8.1-rev._160519 8.1-rev._160519.x