2019-12-02 02:30:57
mitre
PUBLISHED
Kentico before 12.0.50 allows file uploads in which the Content-Type header is inconsistent with the file extension, leading to XSS.