CVE-2025-2748 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

The Kentico Xperience application does not fully validate or filter files uploaded via the multiple-file upload functionality, which allows for stored XSS.This…
Medium CVSS: 6.1

CVE-2025-2748

The Kentico Xperience application does not fully validate or filter files uploaded via the multiple-file upload functionality, which allows for stored XSS.This issue affects Kentico Xperience through 13.0.178.
Vendor
Kentico
Product
Xperience
CWE
CWE-79
Yayın Tarihi
2025-03-24 19:15:52
Güncelleme
2025-12-27 17:15:47
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-79 Xperience MEDIUM Kentico 2025

Referanslar

https://devnet.kentico.com/download/hotfixes