Kentico vulnerabilities
38 CVEs and advisories name Kentico as an affected vendor, 3 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-2794Kentico Xperience <= 13.0.180 Unsafe Reflection
- CVE-2025-2878Kentico CMS Additional Database Installation Wizard install.aspx cross site scripting
- CVE-2025-2748Kentico Xperience stored cross-site scripting in multiple-file upload functionality
- CVE-2025-2749Kentico Xperience <= 13.0.178 Staging Media File Upload Authenticated RCE
- CVE-2025-2747Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication Bypass
- CVE-2025-2746Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication Bypass
- CVE-2024-12907XSS in Kentico 7
- CVE-2021-43991Persistent XSS via Avatar Upload in Kentico Xperience CMS