CVE-2017-9356: Sitecore Sitecore.net

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Sitecore.NET 7.1 through 7.2 has a Cross Site Scripting Vulnerability via the searchStr parameter to the /Search-Results URI.

Affected products

• Sitecore Sitecore.net: version 7.1 only; version 7.2 only

Published 2017-06-23. Last modified 2026-06-17.