Lucene search
+L

571 matches found

CNNVD
CNNVD
added 2025/12/18 12:0 a.m.8 views

Kentico Xperience 安全漏洞

Kentico Xperience is a digital experience platform from Kentico. Kentico Xperience suffers from an information disclosure vulnerability that can be exploited by an attacker to cause exposure of internal network details...

6.9CVSS5.8AI score0.00243EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.7 views

Kentico Xperience 跨站脚本漏洞

Kentico Xperience is a digital experience platform from Kentico. Kentico Xperience suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute malicious script in an administrator user's browser...

6.1CVSS5.7AI score0.00161EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.7 views

Kentico Xperience 安全漏洞

Kentico Xperience is a digital experience platform from Kentico. Kentico Xperience suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary web script or HTML by injecting a crafted payload...

5.1CVSS5.9AI score0.00146EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.7 views

PT-2025-52326

Name of the Vulnerable Software and Affected Versions Kentico Xperience affected versions not specified Description A reflected cross-site scripting issue exists in Kentico Xperience. This allows attackers to inject malicious scripts through the Pages dashboard widget configuration dialog...

6.1CVSS5.9AI score0.00161EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.10 views

PT-2025-52327

Name of the Vulnerable Software and Affected Versions Kentico Xperience affected versions not specified Description An information disclosure issue exists in Kentico Xperience that allows unauthorized public users to access sensitive hostname details of the administration interface during...

6.9CVSS6AI score0.00243EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.6 views

Kentico Xperience 安全漏洞

Kentico Xperience is a digital experience platform from Kentico. Kentico Xperience has a security vulnerability that can be exploited by an attacker to cause sensitive information to be exposed to an external domain...

5.3CVSS5.8AI score0.00259EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.5 views

PT-2025-52303

Name of the Vulnerable Software and Affected Versions Kentico Xperience affected versions not specified Description A reflected cross-site scripting issue exists in Kentico Xperience. This allows attackers to inject malicious scripts through administration input fields within the Rich text editor...

6.1CVSS6AI score0.0019EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.10 views

PT-2025-52302

Name of the Vulnerable Software and Affected Versions Kentico Xperience affected versions not specified Description A stored cross-site scripting issue exists in Kentico Xperience. Administration users can inject malicious scripts through email marketing templates. Exploitation allows attackers t...

5.1CVSS5.8AI score0.00177EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.5 views

Kentico Xperience 安全漏洞

Kentico Xperience is a digital experience platform from Kentico. Kentico Xperience suffers from an information disclosure vulnerability that originates in the Live Site Part Properties dialog box that could disclose sensitive system objects and can be exploited by an attacker to cause unauthorize...

5.3CVSS5.8AI score0.00232EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.7 views

PT-2025-52330

Name of the Vulnerable Software and Affected Versions Kentico Xperience affected versions not specified Description A stored cross-site scripting issue exists in Kentico Xperience. The issue is related to the Checkbox form component, which allows attackers to inject malicious scripts. Successful...

5.4CVSS5.8AI score0.00143EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.11 views

PT-2025-52295

An unrestricted file upload vulnerability in Kentico Xperience allows authenticated users with 'Read data' permissions to upload arbitrary file types via MVC form file uploader components. Attackers can manipulate file names and upload potentially malicious files to the system, enabling...

8.8CVSS7AI score0.00293EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.7 views

Kentico Xperience 加密问题漏洞

Kentico Xperience is a digital experience platform from Kentico. Kentico Xperience suffers from a security vulnerability that can be exploited by an attacker to cause URL hashes to be tampered with...

7.5CVSS5.8AI score0.00206EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.7 views

PT-2025-52311

Name of the Vulnerable Software and Affected Versions Kentico Xperience affected versions not specified Description A stored cross-site scripting issue exists in Kentico Xperience. Global administrators can inject malicious payloads through the Localization application. Successful exploitation...

5.1CVSS5.9AI score0.00146EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.6 views

PT-2025-52328

Name of the Vulnerable Software and Affected Versions Kentico Xperience affected versions not specified Description A stored cross-site scripting issue exists in Kentico Xperience. This allows attackers to inject malicious scripts through the configuration of form validation rules. Successful...

5.4CVSS5.8AI score0.00143EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.5 views

Kentico Xperience 安全漏洞

Kentico Xperience is a digital experience platform from Kentico. Kentico Xperience has a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

8.7CVSS5.8AI score0.00373EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.6 views

Kentico Xperience 跨站脚本漏洞

Kentico Xperience is a digital experience platform from Kentico. Kentico Xperience suffers from an HTML injection vulnerability that stems from the lack of valid filtering and escaping of user-supplied data in unencoded form fields, which can be exploited by an attacker to execute arbitrary web...

6.1CVSS6.1AI score0.00171EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.9 views

Kentico Xperience 安全漏洞

Kentico Xperience is a digital experience platform from Kentico. Kentico Xperience suffers from an information disclosure vulnerability that can be exploited by attackers to cause information disclosure...

7.5CVSS5.8AI score0.00269EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.4 views

Kentico Xperience 安全漏洞

Kentico Xperience is a digital experience platform from Kentico. Kentico Xperience suffers from an access control bypass vulnerability that can be exploited by an attacker to cause an account takeover...

8.6CVSS5.8AI score0.003EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.9 views

Kentico Xperience 跨站脚本漏洞

Kentico Xperience is a digital experience platform from Kentico. Kentico Xperience suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the administration interface, which can be exploited by an attacker to execute...

5.4CVSS5.9AI score0.00171EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.8 views

Kentico Xperience 跨站脚本漏洞

Kentico Xperience is a digital experience platform from Kentico. A cross-site scripting vulnerability exists in the Kentico Xperience rich text editor component that can be exploited by an attacker to execute arbitrary script in a user's browser...

6.1CVSS5.9AI score0.0019EPSS
SaveExploits0References2
Rows per page
Query Builder