Stored Cross-Site Scripting Vulnerability in Kentico Xperience by Kentico

CVE-2020-36889

What is CVE-2020-36889?

A stored cross-site scripting vulnerability exists in Kentico Xperience that enables attackers to inject malicious scripts into the administration interface. By exploiting this flaw, attackers may execute harmful scripts in the browsers of administrators when they view error messages containing specifically crafted object names. This can lead to unauthorized actions and exposure of sensitive information, posing a significant risk to user security and data integrity.

References