CVE-2020-36850: Sitecore Jss React Sample Application

High severity, CVSS 8.7. EPSS: 0.5% chance of exploitation in the next 30 days.

An information disclosure vulnerability exits in Sitecore JSS React Sample Application 11.0.0 - 14.0.1 that may cause page content intended for one user to be shown to another user.

Affected products

• Sitecore Jss React Sample Application: from 11.0.0, up to and including 14.0.1

Published 2025-07-25. Last modified 2026-06-17.