CVE-2024-58321: Kentico Xperience <= 13.0.159 Form Validation Stored XSS
A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via form validation rule configuration. Attackers can exploit this vulnerability to execute malicious scripts that will run in users' browsers.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-58321?
The severity of CVE-2024-58321 is classified as high due to its potential to allow attackers to execute malicious scripts in users' browsers.
How do I fix CVE-2024-58321?
To fix CVE-2024-58321, upgrade Kentico Xperience to version 13.0.160 or later, where the vulnerability has been patched.
What are the potential impacts of CVE-2024-58321?
The potential impacts of CVE-2024-58321 include unauthorized script execution, data theft, and user session hijacking.
Who is affected by CVE-2024-58321?
CVE-2024-58321 affects users of Kentico Xperience up to version 13.0.159 that utilize form validation rule configurations.
How can attackers exploit CVE-2024-58321?
Attackers can exploit CVE-2024-58321 by injecting malicious scripts through improperly validated form data, which then execute in the context of the user's browser.