critical9.8
CVE-2021-27581
The Blog module in Kentico CMS 5.5 R2 build 5.5.3996 allows SQL injection via the tagname parameter.
Impact
The Blog module in Kentico CMS 5.5 R2 build 5.5.3996 allows SQL injection via the tagname parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kentico | Kentico Cms | Version 5.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gist.github.com/stasinopoulos/673ae3c31d703b4d67449f4d8888c686
- https://kontent.ai
- https://www.obrela.com/kentico-cms-critical-vulnerability/
- https://gist.github.com/stasinopoulos/673ae3c31d703b4d67449f4d8888c686
- https://kontent.ai
- https://www.obrela.com/kentico-cms-critical-vulnerability/