CVE-2017-9356

Sitecore.NET 7.1 through 7.2 has a Cross Site Scripting Vulnerability via the searchStr parameter to the /Search-Results URI.

Date published : 2017-06-23

http://www.securityfocus.com/bid/99239

http://seclists.org/bugtraq/2017/Jun/43