Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2021-47711

Kentico Xperience <= 13.0.52 Online Marketing Macros SQL Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

A SQL injection vulnerability in Kentico Xperience allows authenticated editors to inject malicious SQL queries via online marketing macro method parameters. This enables unauthorized database access and potential data manipulation by exploiting macro method input validation weaknesses.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Kentico Xperience

  • 0 to ≤ 13.0.52affected

References