SQL Injection Vulnerability in Kentico Xperience by Kentico

CVE-2021-47711

What is CVE-2021-47711?

A SQL injection vulnerability in Kentico Xperience allows authenticated users to exploit weaknesses in input validation related to online marketing macros. By injecting malicious SQL queries through macro method parameters, attackers can gain unauthorized access to the database, potentially leading to significant data manipulation and exposure of sensitive information. This poses a serious risk to data integrity and overall application security. It is crucial for users to apply the appropriate hotfixes to mitigate this vulnerability.

References