CVE-2024-58319: Kentico Xperience <= 13.0.160 Pages Dashboard Widget Reflected XSS
A reflected cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via the Pages dashboard widget configuration dialog. Attackers can exploit this vulnerability to execute malicious scripts in administrative users' browsers.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-58319?
CVE-2024-58319 is classified as a reflected cross-site scripting vulnerability that can impact the security of administrative users in Kentico Xperience.
How do I fix CVE-2024-58319?
To mitigate CVE-2024-58319, update your Kentico Xperience installation to version 13.0.161 or later.
Who is affected by CVE-2024-58319?
CVE-2024-58319 affects users of Kentico Xperience up to version 13.0.160.
What types of attacks are possible through CVE-2024-58319?
Attackers can exploit CVE-2024-58319 to inject and execute malicious scripts in the browsers of administrative users.
What component of Kentico Xperience is vulnerable in CVE-2024-58319?
The vulnerability in CVE-2024-58319 resides in the Pages dashboard widget configuration dialog of Kentico Xperience.