Vulnerabilities

TI-2025-20579 CVE-2025-27802 · GHSA-hwcj-2grf-hc24

Stored Cross-Site Scripting in Episerver Content Management System (CMS) Edit Preview

LOW 22

The Episerver Content Management System (CMS) by Optimizely was affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00365 Published 2025-07-28 Fixed in 11.21.4, 12.22.1 CWE-79

TI-2025-20578 CVE-2025-27801 · GHSA-c873-fj46-wp48

LOW 21

The Episerver Content Management System (CMS) by Optimizely was affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities.

CVSS 4.0MEDIUM 4.6 Network High privileges User interaction EPSS 0.00389 Published 2025-07-28 Fixed in 11.21.4, 12.22.1 CWE-79

TI-2025-20577 CVE-2025-27800 · GHSA-9p6h-f8wj-744p

LOW 22

The Episerver Content Management System (CMS) by Optimizely was affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00404 Published 2025-07-28 Fixed in 11.21.4, 12.22.1 CWE-79