CVE-2016-8855: Sitecore Experience Platform

Medium severity, CVSS 6.1. EPSS: 2.2% chance of exploitation in the next 30 days.

Cross-Site Scripting (XSS) in "/sitecore/client/Applications/List Manager/Taskpages/Contact list" in Sitecore Experience Platform 8.1 rev. 160519 (8.1 Update-3) allows remote attacks via the Name or Description parameter. This is fixed in 8.2 Update-2.

Affected products

• Sitecore Experience Platform: version 8.1 only

Published 2017-03-19. Last modified 2026-06-17.