CVE-2025-5591

Stored Cross-site Scripting (XSS) in Kentico Xperience 13 PUBLISHED

Description (CNA)

Kentico Xperience 13 is vulnerable to a stored cross-site scripting attack via a form component, allowing an attacker to hijack a victim user’s session and perform actions in their security context.

Affected (CNA)

Vendor / product	Versions
Kentico / Kentico Xperience	affected 13.0.167

CWE

CWE-79, CWE-1188

References

https://www.themissinglink.com.au/security-advisories/cve-2025-5591

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.