CNNVD-202512-3388 Information

CNNVD ID

CNNVD-202512-3388

CVE-2023-53737

  • CNNVD Published: 2025-12-18

Description (Chinese)

Kentico Xperience是Kentico公司的一个数字体验平台。 Kentico Xperience存在安全漏洞,该漏洞源于本地化应用程序可能被注入恶意有效载荷,导致存储型跨站脚本攻击。

Description (English)

Kentico Xperience is a digital experience platform for Kentico. There is a security loophole in Kentico Xperience, which stems from the possibility that a localized application may be injected into a malicious payload, leading to a storage-type cross-site script attack.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Kentico

Published

2025-12-18

Last Modified

2026-02-24

References

https://devnet.kentico.com/download/hotfixes https://www.vulncheck.com/advisories/kentico-xperience-localization-application-stored-xss2

Patch

https://devnet.kentico.com/download/hotfixes

Share on: