Vendors / Optimizely Records 15 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 6
Exploited now Optimizely records in CISA KEV No Optimizely vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 55
Optimizely CMS UI before v12.16.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Admin panel.
CVSS 3.1 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00423 · Published 2023-11-14 · No fix listed CWE-79
Priority LOW 39
An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00359 · Published 2025-01-04 · No fix listed CWE-521
Priority LOW 39
An issue was discovered in Optimizely Configured Commerce before 5.2.2408.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00379 · Published 2025-01-04 · No fix listed CWE-598
Priority LOW 39
An issue was discovered in Optimizely Configured Commerce before 5.2.2408.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00421 · Published 2025-01-04 · No fix listed CWE-472
Priority LOW 37
An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0.
CVSS 3.1 HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00503 · Published 2025-01-04 · No fix listed CWE-434
Priority LOW 37
In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from client-side template injection in search history.
CVSS 3.1 HIGH 8.1· Network · No auth · No interaction · EPSS 0.00383 · Published 2024-12-18 · No fix listed CWE-79
Priority LOW 34
An issue was discovered in Optimizely Configured Commerce before 5.2.2408.
CVSS 3.1 HIGH 7.3· Network · Low privileges · User interaction · EPSS 0.00288 · Published 2025-01-04 · No fix listed CWE-613
Priority LOW 27
In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from client-side template injection in list item names.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00239 · Published 2024-12-18 · No fix listed CWE-79
Priority LOW 26
An issue was discovered in Optimizely EPiServer.CMS.Core before 12.22.0.
CVSS 3.1 MEDIUM 5.7· Network · Low privileges · User interaction · EPSS 0.00373 · Published 2025-01-04 · No fix listed CWE-79
Priority LOW 26
An issue was discovered in Optimizely Configured Commerce before 5.2.2408.
CVSS 3.1 MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00327 · Published 2025-01-04 · No fix listed CWE-862
Priority LOW 22
The Episerver Content Management System (CMS) by Optimizely was affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities.
CVSS 4.0 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00365 · Published 2025-07-28 · Fixed in 11.21.4, 12.22.1 CWE-79
Priority LOW 22
The Episerver Content Management System (CMS) by Optimizely was affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities.
CVSS 4.0 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00404 · Published 2025-07-28 · Fixed in 11.21.4, 12.22.1 CWE-79
Priority LOW 21
The Episerver Content Management System (CMS) by Optimizely was affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities.
CVSS 4.0 MEDIUM 4.6· Network · High privileges · User interaction · EPSS 0.00389 · Published 2025-07-28 · Fixed in 11.21.4, 12.22.1 CWE-79
Priority LOW 21
An issue was discovered in Optimizely Configured Commerce before 5.2.2408.
CVSS 3.1 MEDIUM 4.6· Network · Low privileges · User interaction · EPSS 0.00229 · Published 2025-01-04 · No fix listed CWE-79
Priority LOW 21
In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from JavaScript in an SVG document.
CVSS 3.1 MEDIUM 4.7· Network · No auth · User interaction · EPSS 0.00281 · Published 2024-12-18 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 6 9 0 0
THREATIST.IORead the docs