CVE-2024-58318: Kentico Xperience <= 13.0.162 Rich Text Editor Stored XSS
A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via the rich text editor component for page and form builders. Attackers can exploit this vulnerability by entering malicious URIs, potentially allowing malicious scripts to execute in users' browsers.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-58318?
CVE-2024-58318 is classified as a medium severity vulnerability due to its potential impact through cross-site scripting.
How do I fix CVE-2024-58318?
To fix CVE-2024-58318, update Kentico Xperience to version 13.0.163 or later.
What systems are affected by CVE-2024-58318?
CVE-2024-58318 affects Kentico Xperience versions up to and including 13.0.162.
What type of vulnerability is CVE-2024-58318?
CVE-2024-58318 is a stored cross-site scripting (XSS) vulnerability.
How can attackers exploit CVE-2024-58318?
Attackers can exploit CVE-2024-58318 by injecting malicious scripts through the rich text editor component in Kentico Xperience.