← Back to browse · API

CVE-2025-2748

Severity
MEDIUM
CVSS
6.1
EPSS
0.59066
Risk score
45.07
CISA KEV
No
PoC
No
Published
2025-03-24
Modified
2025-12-27
First seen
2026-08-07
Aliases
CNVD-2026-05136, EUVD-2025-8011, GHSA-FX68-23VP-XPXR
Products
Kentico xperience <=13.0.178, Kentico:Xperience 0 ≤13.0.178
Sources
cnvd CNVD-2026-05136
euvd EUVD-2025-8011

Description

The Kentico Xperience application does not fully validate or filter files uploaded via the multiple-file upload functionality, which allows for stored XSS.This issue affects Kentico Xperience through 13.0.178.

References