CVE-2020-24794

The CVE-2020-24794 entry covers a Cross-Site Scripting (XSS) flaw in Kentico CMS prior to 12.0.75. The connected CNVD entry attributes the issue to a lack of proper validation of client-side data, enabling an attacker to execute client-side code. Practical impact is XSS exposure on Kentico-hosted...