Skip to content
OpenAdvisories
Medium · 6.4 CVE-2025-32369 EUVD-2025-9929GHSA-w447-6x96-2x3p

Kentico Xperience before 13.0.181 allows authenticated users to distribute malicious content (for stored XSS) via certain interactions with…

Published Apr 6, 2025 · Updated Apr 7, 2025 · Assigned by mitre

Vendor: Kentico Product: Xperience

Description

Kentico Xperience before 13.0.181 allows authenticated users to distribute malicious content (for stored XSS) via certain interactions with the media library file upload feature.

Affected products

VendorProductAffectedFixed
Kentico Xperience < 13.0.181 13.0.181

References