CVE-2022-50685 — Kentico Xperience <= 13.0.56 File Upload Stored XSS
A stored cross-site scripting vulnerability in Kentico Xperience allows authenticated users to inject malicious scripts via XML file uploads as page attachments or metafiles. At…
Published: 2025-12-18 · CVSS: 5.1 · CVSS 4.0
A stored cross-site scripting vulnerability in Kentico Xperience allows authenticated users to inject malicious scripts via XML file uploads as page attachments or metafiles. Attackers can upload malicious XML files that enable stored XSS, allowing malicious scripts to execute in users' browsers.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7