medium6.1
CVE-2025-2748
The Kentico Xperience application does not fully validate or filter files uploaded via the multiple-file upload functionality, which allows for stored XSS.This…
Impact
The Kentico Xperience application does not fully validate or filter files uploaded via the multiple-file upload functionality, which allows for stored XSS.This issue affects Kentico Xperience through 13.0.178.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kentico | Xperience | through 13.0.178 |