CVEs we hold for Kentico
Records whose assigning authority named Kentico as the affected vendor. Newest identifiers first, capped at 200.
CVE-2025-5591Stored Cross-site Scripting (XSS) in Kentico Xperience 13Kentico Xperience CVE-2025-2878Kentico CMS Additional Database Installation Wizard install.aspx cross site scriptingKentico CMS CVE-2025-2794Kentico Xperience <= 13.0.180 Unsafe ReflectionKentico Xperience CVE-2025-2749Kentico Xperience <= 13.0.178 Staging Media File Upload Authenticated RCEKentico Xperience CVE-2025-2748Kentico Xperience stored cross-site scripting in multiple-file upload functionalityKentico Xperience CVE-2025-2747Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication BypassKentico Xperience CVE-2025-2746Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication BypassKentico Xperience CVE-2024-58323Kentico Xperience <= 13.0.158 Checkbox Form Component Stored XSSKentico Xperience CVE-2024-58322Kentico Xperience <= 13.0.158 Shipping Options Stored XSSKentico Xperience CVE-2024-58321Kentico Xperience <= 13.0.159 Form Validation Stored XSSKentico Xperience CVE-2024-58320Kentico Xperience <= 13.0.159 Authentication Information DisclosureKentico Xperience CVE-2024-58319Kentico Xperience <= 13.0.160 Pages Dashboard Widget Reflected XSSKentico Xperience CVE-2024-58318Kentico Xperience <= 13.0.162 Rich Text Editor Stored XSSKentico Xperience CVE-2024-58317Kentico Xperience <= 13.0.164 Cookie Security ConfigurationKentico Xperience CVE-2023-53934Kentico Xperience <= 12.0.98 GetResource Handler Denial of ServiceKentico Xperience CVE-2023-53738Kentico Xperience <= 13.0.109 Page Preview Reflected XSSKentico Xperience CVE-2023-53737Kentico Xperience <= 13.0.101 Localization Application Stored XSSKentico Xperience CVE-2023-53736Kentico Xperience <= 13.0.120 Administration Interface Reflected XSSKentico Xperience CVE-2022-50686Kentico Xperience <= 12.0 Portal Engine Form Control Information DisclosureKentico Xperience CVE-2022-50685Kentico Xperience <= 13.0.56 File Upload Stored XSSKentico Xperience CVE-2022-50684Kentico Xperience <= 13.0.71 Form Emails HTML InjectionKentico Xperience CVE-2022-50683Kentico Xperience <= 13.0.74 Form Configuration Stored XSSKentico Xperience CVE-2022-50682Kentico Xperience <= 13.0.79 Routing Engine CRLF InjectionKentico Xperience CVE-2022-50681Kentico Xperience <= 13.0.88 Rich Text Editor Reflected XSSKentico Xperience CVE-2022-50680Kentico Xperience <= 13.0.92 Email Marketing Stored XSSKentico Xperience CVE-2021-47712Kentico Xperience <= 12.0.102 URL Hashing Cryptography VulnerabilityKentico Xperience CVE-2021-47711Kentico Xperience <= 13.0.52 Online Marketing Macros SQL InjectionKentico Xperience CVE-2021-43991Persistent XSS via Avatar Upload in Kentico Xperience CMSKentico Xperience XMS CVE-2020-36891Kentico Xperience <= 12.0.49 File Upload Stored XSSKentico Xperience CVE-2020-36890Kentico Xperience <= 10 Administrator Access Control BypassKentico Xperience CVE-2020-36889Kentico Xperience <= 12.0.90 Administration Interface Stored XSSKentico Xperience CVE-2019-25230Kentico Xperience <= 12.0.0 User Widget Information DisclosureKentico Xperience CVE-2019-25229Kentico Xperience <= 12.0.29 MVC Forms Unrestricted File UploadKentico Xperience CVE-2019-25228Kentico Xperience <= 12.0.47 Virtual Context Information DisclosureKentico Xperience 37 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.