← Database

CVE-2025-32369

MEDIUM CVSS: 6.4 Published: 2025-04-06 Modified: 2026-06-17

Description

Kentico Xperience before 13.0.181 allows authenticated users to distribute malicious content (for stored XSS) via certain interactions with the media library file upload feature.

Affected Platforms

Kentico Xperience

Weakness Type

CWE-79, CWE-79

References