Stored Cross-Site Scripting in Kentico Xperience by Kentico

CVE-2024-58321

What is CVE-2024-58321?

A stored cross-site scripting (XSS) vulnerability in Kentico Xperience allows malicious actors to inject harmful scripts through form validation rule configurations. When users interact with these compromised forms, the scripts can execute in their browsers, potentially leading to unauthorized actions or exposure of sensitive data. Organizations using affected versions of Kentico Xperience should promptly address this issue to mitigate risks associated with client-side attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References