Skip to content
OpenAdvisories

Vendor

Kentico

38 known vulnerabilities.

Products

Xperience 34 CMS 1 Kentico CMS 1 Kentico Xperience 1 Kentico Xperience XMS 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2025-32370 Public exploit

    Kentico Xperience before 13.0.178 has a specific set of allowed ContentUploader file extensions for unauthenticated upl…

    Kentico Xperience
  • Medium 6.1
    CVE-2025-2748 Public exploit Scanner template EPSS 61%

    Kentico Xperience stored cross-site scripting in multiple-file upload functionality

    The Kentico Xperience application does not fully validate or filter files uploaded via the multiple-file upload functionality, which allows for stored XSS.This issue affects Kentico Xperience through 13.0.178.

    Kentico Xperience