Kentico Xperience Localization Application Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in Kentico Xperience versions through 13.0.101. This vulnerability allows global administrators to inject malicious scripts via the Localization application, which could be executed and potentially impact various areas of the administration interface.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user.

Remediation

Users can upgrade to Kentico Xperience version 13.0.102 or later, where this vulnerability has been addressed. Instructions for applying hotfixes are available on the Kentico Xperience documentation site.