CVE-2025-27802 | Medium | 4.8 | 2025-07-28 | The Episerver Content Management System (CMS) by Optimizely was affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities. This allowed an authent… |
CVE-2025-27801 | Medium | 4.8 | 2025-07-28 | The Episerver Content Management System (CMS) by Optimizely was affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities. This allowed an authent… |
CVE-2025-27800 | Medium | 4.8 | 2025-07-28 | The Episerver Content Management System (CMS) by Optimizely was affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities. This allowed an authent… |
CVE-2025-22390 | High | 7.5 | 2025-01-04 | An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity vulnerability exists in the CMS due to insufficient enforcement of p… |
CVE-2025-22389 | High | 8.0 | 2025-01-04 | An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity vulnerability exists in the CMS, where the application does not prop… |
CVE-2025-22388 | Medium | 5.7 | 2025-01-04 | An issue was discovered in Optimizely EPiServer.CMS.Core before 12.22.0. A high-severity Stored Cross-Site Scripting (XSS) vulnerability exists in the CMS, all… |
CVE-2025-22387 | High | 7.5 | 2025-01-04 | An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue exists in requests for resources where the session token is… |
CVE-2025-22386 | High | 7.3 | 2025-01-04 | An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity session issue exists in the Commerce B2B application, affecting th… |
CVE-2025-22385 | Medium | 5.9 | 2025-01-04 | An issue was discovered in Optimizely Configured Commerce before 5.2.2408. For newly created accounts, the Commerce B2B application does not require email conf… |
CVE-2025-22384 | High | 7.5 | 2025-01-04 | An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue concerning business logic exists in the Commerce B2B applica… |
CVE-2025-22383 | Medium | 4.6 | 2025-01-04 | An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity input validation issue exists in the Commerce B2B application, aff… |
CVE-2024-56175 | Medium | 6.1 | 2024-12-18 | In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS… |
CVE-2024-56174 | High | 8.1 | 2024-12-18 | In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS… |
CVE-2024-56173 | Medium | 4.7 | 2024-12-18 | In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS… |
CVE-2023-31754 | Medium | 4.8 | 2023-11-14 | Optimizely CMS UI before v12.16.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Admin panel. |