CVE-2015-7822: XSS
Multiple cross-site scripting (XSS) vulnerabilities in Kentico CMS 8.2 allow remote attackers to inject arbitrary web script or HTML via a (1) parameter name to CMSModules/AdminControls/Pages/UIPage.aspx or the (2) CMSBodyClass cookie variable to the default URI.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7822?
CVE-2015-7822 is classified as a medium severity vulnerability due to its potential for exploitation through cross-site scripting.
How do I fix CVE-2015-7822?
To fix CVE-2015-7822, ensure that you update your Kentico CMS to a version higher than 8.2 that addresses these XSS issues.
What systems are affected by CVE-2015-7822?
CVE-2015-7822 affects Kentico CMS version 8.2.
What types of attacks can be executed through CVE-2015-7822?
CVE-2015-7822 allows remote attackers to perform cross-site scripting attacks by injecting arbitrary web scripts or HTML.
Are there any mitigation strategies for CVE-2015-7822?
Mitigation strategies for CVE-2015-7822 include input validation and configuring security settings in Kentico CMS to limit script execution.