← Database

CVE-2025-34511

HIGH CVSS: 8.8 Published: 2025-06-17 Modified: 2026-06-17

Description

Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager (XM) and Experience Platform (XP), through version 7.0 is vulnerable to an unrestricted file upload issue. A remote, authenticated attacker can upload arbitrary files to the server using crafted HTTP requests, resulting in remote code execution.

Affected Platforms

Sitecore Experience ManagerSitecore Experience PlatformSitecore Managed CloudSitecore Experience Commerce

Weakness Type

CWE-434

References