agentprime: kentico-xperienceEvery new CVE for kentico-xperience.https://agentprime.io/CVE-2026-105046: Forced browsing in Kentico Xperiencehttps://agentprime.io/advisories/CVE-2026-105046/https://agentprime.io/advisories/CVE-2026-105046/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 21:51:34 GMTCVECVE-2025-5591: Stored Cross-site Scripting (XSS) in Kentico Xperience 13https://agentprime.io/advisories/CVE-2025-5591/https://agentprime.io/advisories/CVE-2025-5591/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Jan 2026 00:02:51 GMTCVECVE-2024-58323: Kentico Xperience <= 13.0.158 Checkbox Form Component Stored XSShttps://agentprime.io/advisories/CVE-2024-58323/https://agentprime.io/advisories/CVE-2024-58323/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 19:53:39 GMTCVECVE-2024-58322: Kentico Xperience <= 13.0.158 Shipping Options Stored XSShttps://agentprime.io/advisories/CVE-2024-58322/https://agentprime.io/advisories/CVE-2024-58322/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 19:53:39 GMTCVECVE-2024-58321: Kentico Xperience <= 13.0.159 Form Validation Stored XSShttps://agentprime.io/advisories/CVE-2024-58321/https://agentprime.io/advisories/CVE-2024-58321/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 19:53:38 GMTCVECVE-2024-58320: Kentico Xperience <= 13.0.159 Authentication Information Disclosurehttps://agentprime.io/advisories/CVE-2024-58320/https://agentprime.io/advisories/CVE-2024-58320/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 19:53:38 GMTCVECVE-2024-58319: Kentico Xperience <= 13.0.160 Pages Dashboard Widget Reflected XSShttps://agentprime.io/advisories/CVE-2024-58319/https://agentprime.io/advisories/CVE-2024-58319/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 19:53:37 GMTCVECVE-2024-58318: Kentico Xperience <= 13.0.162 Rich Text Editor Stored XSShttps://agentprime.io/advisories/CVE-2024-58318/https://agentprime.io/advisories/CVE-2024-58318/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 19:53:37 GMTCVECVE-2024-58317: Kentico Xperience <= 13.0.164 Cookie Security Configurationhttps://agentprime.io/advisories/CVE-2024-58317/https://agentprime.io/advisories/CVE-2024-58317/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 19:53:37 GMTCVECVE-2023-53934: Kentico Xperience <= 12.0.98 GetResource Handler Denial of Servicehttps://agentprime.io/advisories/CVE-2023-53934/https://agentprime.io/advisories/CVE-2023-53934/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 19:53:32 GMTCVECVE-2023-53738: Kentico Xperience <= 13.0.109 Page Preview Reflected XSShttps://agentprime.io/advisories/CVE-2023-53738/https://agentprime.io/advisories/CVE-2023-53738/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 19:53:31 GMTCVECVE-2023-53737: Kentico Xperience <= 13.0.101 Localization Application Stored XSShttps://agentprime.io/advisories/CVE-2023-53737/https://agentprime.io/advisories/CVE-2023-53737/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 19:53:30 GMTCVECVE-2023-53736: Kentico Xperience <= 13.0.120 Administration Interface Reflected XSShttps://agentprime.io/advisories/CVE-2023-53736/https://agentprime.io/advisories/CVE-2023-53736/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 19:53:30 GMTCVECVE-2022-50686: Kentico Xperience <= 12.0 Portal Engine Form Control Information Disclosurehttps://agentprime.io/advisories/CVE-2022-50686/https://agentprime.io/advisories/CVE-2022-50686/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 19:53:30 GMTCVECVE-2022-50685: Kentico Xperience <= 13.0.56 File Upload Stored XSShttps://agentprime.io/advisories/CVE-2022-50685/https://agentprime.io/advisories/CVE-2022-50685/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 19:53:29 GMTCVECVE-2022-50684: Kentico Xperience <= 13.0.71 Form Emails HTML Injectionhttps://agentprime.io/advisories/CVE-2022-50684/https://agentprime.io/advisories/CVE-2022-50684/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 19:53:29 GMTCVECVE-2022-50683: Kentico Xperience <= 13.0.74 Form Configuration Stored XSShttps://agentprime.io/advisories/CVE-2022-50683/https://agentprime.io/advisories/CVE-2022-50683/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 19:53:28 GMTCVECVE-2022-50682: Kentico Xperience <= 13.0.79 Routing Engine CRLF Injectionhttps://agentprime.io/advisories/CVE-2022-50682/https://agentprime.io/advisories/CVE-2022-50682/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 19:53:28 GMTCVECVE-2022-50681: Kentico Xperience <= 13.0.88 Rich Text Editor Reflected XSShttps://agentprime.io/advisories/CVE-2022-50681/https://agentprime.io/advisories/CVE-2022-50681/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 19:53:27 GMTCVECVE-2022-50680: Kentico Xperience <= 13.0.92 Email Marketing Stored XSShttps://agentprime.io/advisories/CVE-2022-50680/https://agentprime.io/advisories/CVE-2022-50680/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 19:53:27 GMTCVECVE-2021-47712: Kentico Xperience <= 12.0.102 URL Hashing Cryptography Vulnerabilityhttps://agentprime.io/advisories/CVE-2021-47712/https://agentprime.io/advisories/CVE-2021-47712/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 19:53:26 GMTCVECVE-2021-47711: Kentico Xperience <= 13.0.52 Online Marketing Macros SQL Injectionhttps://agentprime.io/advisories/CVE-2021-47711/https://agentprime.io/advisories/CVE-2021-47711/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 19:53:26 GMTCVECVE-2020-36891: Kentico Xperience <= 12.0.49 File Upload Stored XSShttps://agentprime.io/advisories/CVE-2020-36891/https://agentprime.io/advisories/CVE-2020-36891/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 19:53:26 GMTCVECVE-2020-36890: Kentico Xperience <= 10 Administrator Access Control Bypasshttps://agentprime.io/advisories/CVE-2020-36890/https://agentprime.io/advisories/CVE-2020-36890/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 19:53:25 GMTCVECVE-2020-36889: Kentico Xperience <= 12.0.90 Administration Interface Stored XSShttps://agentprime.io/advisories/CVE-2020-36889/https://agentprime.io/advisories/CVE-2020-36889/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 19:53:25 GMTCVECVE-2019-25230: Kentico Xperience <= 12.0.0 User Widget Information Disclosurehttps://agentprime.io/advisories/CVE-2019-25230/https://agentprime.io/advisories/CVE-2019-25230/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 19:53:24 GMTCVECVE-2019-25229: Kentico Xperience <= 12.0.29 MVC Forms Unrestricted File Uploadhttps://agentprime.io/advisories/CVE-2019-25229/https://agentprime.io/advisories/CVE-2019-25229/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 19:53:24 GMTCVECVE-2019-25228: Kentico Xperience <= 12.0.47 Virtual Context Information Disclosurehttps://agentprime.io/advisories/CVE-2019-25228/https://agentprime.io/advisories/CVE-2019-25228/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 19:53:23 GMTCVECVE-2025-32370: Kentico Xperience: Kentico Xperience before 13.0.178 has a specific set of allowed ContentUploader file…https://agentprime.io/advisories/CVE-2025-32370/https://agentprime.io/advisories/CVE-2025-32370/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 06 Apr 2025 00:00:00 GMTCVECVE-2025-32369: Cross-site scripting in Kentico Xperiencehttps://agentprime.io/advisories/CVE-2025-32369/https://agentprime.io/advisories/CVE-2025-32369/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 06 Apr 2025 00:00:00 GMTCVECVE-2025-2794: Kentico Xperience <= 13.0.180 Unsafe Reflectionhttps://agentprime.io/advisories/CVE-2025-2794/https://agentprime.io/advisories/CVE-2025-2794/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Mar 2025 16:22:48 GMTCVECVE-2025-2748: Kentico Xperience stored cross-site scripting in multiple-file upload functionalityhttps://agentprime.io/advisories/CVE-2025-2748/https://agentprime.io/advisories/CVE-2025-2748/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Mar 2025 18:22:30 GMTCVECVE-2025-2749: Kentico Xperience <= 13.0.178 Staging Media File Upload Authenticated RCEhttps://agentprime.io/advisories/CVE-2025-2749/https://agentprime.io/advisories/CVE-2025-2749/CVSS 7.2 (High). Critical: In CISA’s KEV catalogue since 20 Apr 2026: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Mar 2025 18:18:07 GMTCVEcriticalKEVCVE-2025-2747: Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication Bypasshttps://agentprime.io/advisories/CVE-2025-2747/https://agentprime.io/advisories/CVE-2025-2747/CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 20 Oct 2025: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.97 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Mar 2025 18:17:06 GMTCVEcriticalKEVCVE-2025-2746: Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication Bypasshttps://agentprime.io/advisories/CVE-2025-2746/https://agentprime.io/advisories/CVE-2025-2746/CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 20 Oct 2025: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.74 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Mar 2025 18:16:04 GMTCVEcriticalKEV