← Database

CVE-2025-2748

MEDIUM CVSS: 6.1 Published: 2025-03-24 Modified: 2026-06-17

Description

The Kentico Xperience application does not fully validate or filter files uploaded via the multiple-file upload functionality, which allows for stored XSS.This issue affects Kentico Xperience through 13.0.178.

Affected Platforms

Kentico Xperience

Weakness Type

CWE-79, CWE-434, CWE-79

References