Reflected Cross-Site Scripting Vulnerability in Kentico Xperience

CVE-2024-58319

What is CVE-2024-58319?

A reflected cross-site scripting vulnerability exists in the Kentico Xperience platform, specifically within the Pages dashboard widget configuration dialog. This flaw permits attackers to inject malicious scripts, which may be executed in the browsers of administrative users. This could lead to unauthorized actions within the application and data compromise. To mitigate risk, it is recommended that users update to the latest version or apply available patches.

References