CVE-2022-27503: Citrix StoreFront Server

Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days.

Cross-site Scripting (XSS) vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9

Affected products

• Citrix StoreFront Server: from 3.12, before 3.12.9000 (fixed in 3.12.9000); from 1912, before 1912.0.5000 (fixed in 1912.0.5000)

Published 2022-04-13. Last modified 2026-06-17.