Security Advisory

CVE-2025-2748

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-03-24 18:22:30

Last updated 2025-12-27 16:47:39

Assigner VulnCheck

State PUBLISHED

Description

The Kentico Xperience application does not fully validate or filter files uploaded via the multiple-file upload functionality, which allows for stored XSS.This issue affects Kentico Xperience through 13.0.178.

← Browse all CVEs View on cve.org ↗