CVE-2019-19493

Kentico before 12.0.50 allows file uploads in which the Content-Type header is inconsistent with the file extension, leading to XSS...

Kentico CMS 9.0-12.0.49 Cross Site Scripting

Exploit Title: Kentico CMS 9.0-12.0.49 - Persistent Cross Site Scripting Exploit Author: Ataberk YAVUZER CVE: CVE-2019-19493 Type: Webapps Vendor Homepage: https://www.kentico.com/ Version: 9.0-12.0.49 Date: 29-11-2019 CVE Details: https://nvd.nist.gov/vuln/detail/CVE-2019-19493 Details Persisten...

CVE-2019-19493

CVE-2019-19493 affects Kentico CMS prior to 12.0.50. A cross-site scripting (XSS) vulnerability exists where file uploads with a Content-Type header that does not match the file extension can lead to script execution. The issue is described across multiple sources as tied to versions before 12.0....