Vulnerability Database

313,825

Total vulnerabilities in the database

CVE-2019-13493

In Sitecore 9.0 rev 171002, Persistent XSS exists in the Media Library and File Manager. An authenticated unprivileged user can modify the uploaded file extension parameter to inject arbitrary JavaScript.

  • Published: Jul 17, 2019
  • Updated: Nov 9, 2025
  • CVE: CVE-2019-13493
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 3.5
  • AV:N/AC:M/Au:S/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
sitecore / experience_platform 9.0 9.0.x