CVE-2022-4979

🗓️ 25 Jul 2025 15:55:36Reported by VulnCheckType

Cross-site scripting vulnerability in Sitecore XP 7.5-10.2 and CMS 7.2 allowing JavaScript execution

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2022-4979	25 Jul 202516:37	–	circl
CNNVD	Sitecore Experience Platform（XP）和Sitecore Experience Manager（XM）安全漏洞	25 Jul 202500:00	–	cnnvd
Cvelist	CVE-2022-4979 Sitecore XP 7.5 - 10.2, CMS 7.2, and Managed Cloud XSS	25 Jul 202515:55	–	cvelist
EUVD	EUVD-2022-55211	3 Oct 202520:07	–	euvd
NVD	CVE-2022-4979	25 Jul 202516:15	–	nvd
Positive Technologies	PT-2025-30884 · Sitecore · Sitecore Cms +1	25 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2022-4979	27 Jul 202516:14	–	redhatcve
Vulnrichment	CVE-2022-4979 Sitecore XP 7.5 - 10.2, CMS 7.2, and Managed Cloud XSS	25 Jul 202515:55	–	vulnrichment

Vulners

CNA

Node

sitecore experience_platformRange7.5–7.5

sitecore experience_platformRange8.0–8.0

sitecore experience_platformRange8.1–8.1

sitecore experience_platformRange8.2–8.2

sitecore experience_platformRange9.0–9.0

sitecore experience_platformRange9.1–9.1

sitecore experience_platformMatch9.2

sitecore experience_platformMatch9.3

sitecore experience_platformRange10.0–10.0

sitecore experience_platformRange10.1–10.1

sitecore experience_platformMatch10.2

sitecore content_mangement_systemRange7.2–7.2

[
  {
    "defaultStatus": "unaffected",
    "product": "Experience Platform",
    "vendor": "Sitecore",
    "versions": [
      {
        "lessThanOrEqual": "7.5 Update-2",
        "status": "affected",
        "version": "7.5 Initial Release",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "8.0 Update-7",
        "status": "affected",
        "version": "8.0 Initial Release",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "8.1 Update-3",
        "status": "affected",
        "version": "8.1 Initial Release",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "8.2 Update-7",
        "status": "affected",
        "version": "8.2 Initial Release",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "9.0 Update-2",
        "status": "affected",
        "version": "9.0 Initial Release",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "9.1 Update 1",
        "status": "affected",
        "version": "9.1 Initial Release",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "9.2 Initial Release"
      },
      {
        "status": "affected",
        "version": "9.3 Initial Release"
      },
      {
        "lessThanOrEqual": "10.0 Update-3",
        "status": "affected",
        "version": "10.0 Initial Release",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "10.1 Update-2",
        "status": "affected",
        "version": "10.1 Initial Release",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "10.2 Initial Release"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Content Mangement System (CMS)",
    "vendor": "Sitecore",
    "versions": [
      {
        "lessThanOrEqual": "7.2 Update-6",
        "status": "affected",
        "version": "7.2 Initial Release",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Managed Cloud",
    "vendor": "Sitecore",
    "versions": [
      {
        "status": "affected",
        "version": "*"
      }
    ]
  }
]

Source	Link
support	www.support.sitecore.com/kb
vulncheck	www.vulncheck.com/advisories/sitecore-xp-cms-managed-cloud-xss
support	www.support.sitecore.com/kb

15 Apr 2026 00:35Current

5.3Medium risk

Vulners AI Score5.3

CVSS 45.1

EPSS0.00057

SSVC

CWE-79