Skip to content
OpenAdvisories

Product · Sitecore

Powershell Extension

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2025-34511 Public exploit EPSS 30%

    Sitecore PowerShell Extension RCE via Unrestricted Upload

    Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager (XM) and Experience Platform (XP), through version 7.0 is vulnerable to an unrestricted file upload issue. A remote, authenticated attacker can upload arbitrary files to the server using…

    Sitecore Powershell Extension