Exploitation Summary
EIP tracks 3 public exploits for CVE-2025-53693. PoCs published by blueisbeautiful, fuckyourheroes, brokendreamsclub.
AI-analyzed exploit summary The repository contains a functional Python exploit for CVE-2025-53693, targeting Sitecore XP's XAML handler to poison the cache via the AjaxScriptManager's AddToCache method. The exploit includes methods to check XAML control accessibility, generate malicious payloads, and verify cache poisoning.
Description
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Cache Poisoning.This issue affects Sitecore Experience Manager (XM): from 9.0 through 9.3, from 10.0 through 10.4; Experience Platform (XP): from 9.0 through 9.3, from 10.0 through 10.4.
Exploits (3)
The repository contains a functional Python exploit for CVE-2025-53693, targeting Sitecore XP's XAML handler to poison the cache via the AjaxScriptManager's AddToCache method. The exploit includes methods to check XAML control accessibility, generate malicious payloads, and verify cache poisoning.
This repository contains a functional Python exploit for CVE-2025-53693, which targets a cache poisoning vulnerability in Sitecore's XAML handler. The exploit leverages the `AjaxScriptManager` to inject arbitrary HTML into the Sitecore cache via the `AddToCache` method.
The repository contains a functional Python exploit for CVE-2025-53693, targeting Sitecore XP's XAML handler to poison the cache via the AjaxScriptManager's AddToCache method. The exploit includes methods to check XAML control accessibility, generate malicious payloads, and verify cache poisoning.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H