Security Advisory

CVE-2022-50685

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-12-18 19:53:29

Last updated 2025-12-30 14:09:08

Assigner VulnCheck

State PUBLISHED

Description

A stored cross-site scripting vulnerability in Kentico Xperience allows authenticated users to inject malicious scripts via XML file uploads as page attachments or metafiles. Attackers can upload malicious XML files that enable stored XSS, allowing malicious scripts to execute in users browsers.

← Browse all CVEs View on cve.org ↗