HTML Injection Vulnerability in Kentico Xperience by Kentico

CVE-2022-50684

What is CVE-2022-50684?

In Kentico Xperience, an HTML injection vulnerability has been identified that allows attackers to inject malicious HTML content into form submission emails. This occurs through unencoded form fields, which can lead to HTML content execution within the email clients of recipients. The potential risk includes compromise of email security, making it essential for users of affected versions to apply necessary patches and updates to mitigate this issue.

References