HTML Injection Vulnerability in Kentico Xperience by Kentico

CVE-2022-50684

What is CVE-2022-50684?

In Kentico Xperience, an HTML injection vulnerability has been identified that allows attackers to inject malicious HTML content into form submission emails. This occurs through unencoded form fields, which can lead to HTML content execution within the email clients of recipients. The potential risk includes compromise of email security, making it essential for users of affected versions to apply necessary patches and updates to mitigate this issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References