Optimizely Optimizely Cms — known CVE vulnerabilities

Every CVE whose affected-product data names Optimizely Optimizely Cms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2025-22389 — CVSS 8.0 (high): An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity vulnerability exists in the CMS, where the…
• CVE-2025-22390 — CVSS 7.5 (high): An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity vulnerability exists in the CMS due to…
• CVE-2025-22388 — CVSS 5.7 (medium): An issue was discovered in Optimizely EPiServer.CMS.Core before 12.22.0. A high-severity Stored Cross-Site Scripting (XSS) vulnerability…
• CVE-2023-31754 — CVSS 4.8 (medium): Optimizely CMS UI before v12.16.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Admin panel.