Lucene search
Veracode Vulnerability DatabaseVERACODE:7282HistoryAug 13, 2018 - 8:23 a.m.
Cross-Site Scripting (XSS)
2018-08-1308:23:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.001 Low
EPSS
Percentile
21.9%
Kentico is vulnerable to cross-site scripting (XSS). The vulnerability exists because user-provided input is not escaped properly, allowing to inject a malicious script to the system page.
| CPE | Name | Operator | Version |
|---|---|---|---|
| kentico.libraries | le | 11.0.2 | |
| kentico.libraries | le | 10.0.49 | |
| kentico.libraries.web.ui | le | 11.0.2 | |
| kentico.libraries.web.ui | le | 10.0.49 |
Related
prion
prion
Input validation
2018-03-19 14:29:00
cve
cve
CVE-2018-6842
2018-03-19 14:29:00
cvelist
cvelist
CVE-2018-6842
2018-03-19 14:00:00
nvd
nvd
CVE-2018-6842
2018-03-19 14:29:00
nessus
nessus
Kentico CMS 10.x < 10.0.50 / 11.x < 11.0.3 Multiple Vulnerabilities
2020-10-07 00:00:00