Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2025-2748

Kentico Xperience stored cross-site scripting in multiple-file upload functionality

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

The Kentico Xperience application does not fully validate or filter files uploaded via the multiple-file upload functionality, which allows for stored XSS.This issue affects Kentico Xperience through 13.0.178.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Kentico Xperience

Default version status: affected

  • 0 to ≤ 13.0.178affected

References