CVE-2024-58323: Kentico Xperience <= 13.0.158 Checkbox Form Component Stored XSS
Published Dec 18, 2025
·Updated
A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via the Checkbox form component. This allows malicious scripts to execute in users' browsers by exploiting HTML support in the form builder.
Affected Software
2 affected components
Kentico Xperience<=13.0.158
Kentico Xperience<=13.0.158
Event History
Dec 18, 2025
CVE Published
via MITRE·07:53 PM
Data Sourced
via MITRE·07:53 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-58323?
CVE-2024-58323 has been classified as a medium severity stored cross-site scripting vulnerability.
2
How do I fix CVE-2024-58323?
To fix CVE-2024-58323, upgrade to Kentico Xperience version 13.0.159 or later.
3
What types of attacks can CVE-2024-58323 enable?
CVE-2024-58323 can enable attackers to inject and execute malicious JavaScript in users' browsers.
4
Which versions of Kentico Xperience are affected by CVE-2024-58323?
Kentico Xperience versions up to and including 13.0.158 are vulnerable to CVE-2024-58323.
5
What component in Kentico Xperience is vulnerable in CVE-2024-58323?
CVE-2024-58323 is specifically related to the Checkbox form component within Kentico Xperience.