CVE-2018-6842

MEDIUM

Kentico Xperience 10.0-10.0.50 - Cross-Site Scripting via Crafted URL

Title source: llm
STIX 2.1

Description

Kentico 10 before 10.0.50 and 11 before 11.0.3 has XSS in which a crafted URL results in improper construction of a system page.

References (1)

Core 1
Core References

Scores

CVSS v3 5.4
EPSS 0.0061
EPSS Percentile 46.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (1)
kentico/xperience 10.0 - 10.0.50
Published Mar 19, 2018
Tracked Since Feb 18, 2026