CVE-2024-58322: Kentico Xperience <= 13.0.158 Shipping Options Stored XSS
A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious code into shipping options configuration. This could lead to potential theft of sensitive data by executing malicious scripts in users' browsers.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-58322?
CVE-2024-58322 is a high severity vulnerability due to its potential to allow attackers to execute malicious scripts in users' browsers.
How do I fix CVE-2024-58322?
To fix CVE-2024-58322, update Kentico Xperience to version 13.0.159 or later, which addresses this stored cross-site scripting vulnerability.
What types of attacks can CVE-2024-58322 enable?
CVE-2024-58322 can enable attackers to perform cross-site scripting attacks, potentially leading to data theft or session hijacking.
Which versions of Kentico Xperience are affected by CVE-2024-58322?
CVE-2024-58322 affects Kentico Xperience versions up to and including 13.0.158.
What is the nature of the vulnerability in CVE-2024-58322?
CVE-2024-58322 is a stored cross-site scripting vulnerability that allows code injection into shipping options configuration.