CVE-2023-53737: Kentico Xperience <= 13.0.101 Localization Application Stored XSS
A stored cross-site scripting vulnerability in Kentico Xperience allows global administrators to inject malicious payloads via the Localization application. Attackers can execute scripts that could affect multiple parts of the administration interface.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53737?
The severity of CVE-2023-53737 is rated as high due to its potential for remote code execution via stored cross-site scripting.
How do I fix CVE-2023-53737?
To fix CVE-2023-53737, upgrade Kentico Xperience to version 13.0.102 or later, where the vulnerability is addressed.
Who is affected by CVE-2023-53737?
CVE-2023-53737 affects global administrators using Kentico Xperience versions up to and including 13.0.101.
What types of attacks can CVE-2023-53737 facilitate?
CVE-2023-53737 can facilitate stored cross-site scripting attacks that allow the execution of scripts in the administration interface.
Where in Kentico Xperience is CVE-2023-53737 found?
CVE-2023-53737 is found in the Localization application of Kentico Xperience, impacting global administrators.