Skip to content
OpenAdvisories

Vendor

Optimizely

3 known vulnerabilities.

Products

Episerver Content Management System (CMS) 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.8
    CVE-2025-27802

    Stored Cross-Site Scripting in Episerver Content Management System (CMS) Edit Preview

    The Episerver Content Management System (CMS) by Optimizely was affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities. This allowed an authenticated attacker to execute malicious JavaScript code in the victim's browser. RTE properties (text f…

    Optimizely Episerver Content Management System (CMS)
  • Medium 4.8
    CVE-2025-27801

    Stored Cross-Site Scripting in Episerver Content Management System (CMS) Media Selection Preview

    The Episerver Content Management System (CMS) by Optimizely was affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities. This allowed an authenticated attacker to execute malicious JavaScript code in the victim's browser. ContentReference prope…

    Optimizely Episerver Content Management System (CMS)
  • Medium 4.8
    CVE-2025-27800

    Stored Cross-Site Scripting in Episerver Content Management System (CMS) Admin Dashboard

    The Episerver Content Management System (CMS) by Optimizely was affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities. This allowed an authenticated attacker to execute malicious JavaScript code in the victim's browser. The Admin dashboard of…

    Optimizely Episerver Content Management System (CMS)