Lucene search
China National Vulnerability DatabaseCNVD-2022-03949HistoryJan 14, 2022 - 12:00 a.m.
Kentico Cross-Site Scripting Vulnerability (CNVD-2022-03949)
2022-01-1400:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
0.001 Low
EPSS
Percentile
34.2%
A cross-site scripting vulnerability exists in Kentico Xperience, an ASP.NET-based content management system (CMS) from Kentico U.S. The vulnerability stems from the fact that the product’s media subsystem does not validate input data. An attacker could cause client-side code execution via XML documents through this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| kentico kentico | eq | 13.0.44 |
Related
cve
cve
CVE-2021-46163
2022-01-10 14:11:30
cvelist
cvelist
CVE-2021-46163
2022-01-09 16:31:21
nvd
nvd
CVE-2021-46163
2022-01-10 14:11:30
prion
prion
Design/Logic Flaw
2022-01-10 14:11:00