Stored Cross-Site Scripting in Kentico Xperience by Kentico

CVE-2024-58321

What is CVE-2024-58321?

A stored cross-site scripting (XSS) vulnerability in Kentico Xperience allows malicious actors to inject harmful scripts through form validation rule configurations. When users interact with these compromised forms, the scripts can execute in their browsers, potentially leading to unauthorized actions or exposure of sensitive data. Organizations using affected versions of Kentico Xperience should promptly address this issue to mitigate risks associated with client-side attacks.

References