CVE-2025-32369 – Kentico Xperience Stored Cross-Site Scripting Vulnerability

The following table lists the changes that have been made to the
CVE-2025-32369 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • CVE Modified
    by [email protected]

    Apr. 06, 2025

    Action Type Old Value New Value
    Added CVSS V3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
    Added CWE CWE-79
  • New CVE Received
    by [email protected]

    Apr. 06, 2025

    Action Type Old Value New Value
    Added Description Kentico Xperience before 13.0.181 allows authenticated users to distribute malicious content (for stored XSS) via certain interactions with the media library file upload feature.
    Added Reference https://devnet.kentico.com/download/hotfixes
Share the Post:

Related Posts