medium6.4

CVE-2025-32369

Kentico Xperience before 13.0.181 allows authenticated users to distribute malicious content (for stored XSS) via certain interactions with the media library f…

Impact

Kentico Xperience before 13.0.181 allows authenticated users to distribute malicious content (for stored XSS) via certain interactions with the media library file upload feature.

Affected products

Vendor	Product	Affected versions
Kentico	Xperience	before 13.0.181

Weakness classification

CWE-79

References

NVD record
CVE.org record
https://devnet.kentico.com/download/hotfixes
https://labs.watchtowr.com/xss-to-rce-by-abusing-custom-file-handlers-kentico-xperience-cms-cve-2025-2748/