CVE-2017-9356

The CVE-2017-9356 entry concerns Sitecore.NET versions 7.1–7.2 with a Cross-Site Scripting (XSS) vulnerability in the searchStr parameter of the /Search-Results URI. The root cause is failure to sanitize user-supplied input to the searchStr parameter, enabling an attacker to inject script that ru...