Stored Cross-Site Scripting Vulnerability in Kentico Xperience by Kentico

CVE-2022-50685

What is CVE-2022-50685?

A stored cross-site scripting vulnerability exists in Kentico Xperience that permits authenticated users to upload malicious XML files as page attachments or metafiles. This attack vector enables attackers to insert harmful scripts that may execute within the browsers of users interacting with affected pages. Effective remediation includes applying security patches as provided by Kentico and validating user-uploaded files to prevent potential exploits.

References