CVE-2017-9356

Name of the Vulnerable Software and Affected Versions Sitecore.NET versions 7.1 through 7.2

Description The issue is related to a Cross Site Scripting problem. It can be exploited via the searchStr parameter to the "/Search-Results" URI.

Recommendations For Sitecore.NET versions 7.1 through 7.2, consider restricting access to the "/Search-Results" URI or avoid using the searchStr parameter until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.