SQL Injection Vulnerability in Kentico Xperience by Kentico

CVE-2021-47711

What is CVE-2021-47711?

A SQL injection vulnerability in Kentico Xperience allows authenticated users to exploit weaknesses in input validation related to online marketing macros. By injecting malicious SQL queries through macro method parameters, attackers can gain unauthorized access to the database, potentially leading to significant data manipulation and exposure of sensitive information. This poses a serious risk to data integrity and overall application security. It is crucial for users to apply the appropriate hotfixes to mitigate this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References