What’s Vulnerable › Vulnerabilities

CVE-2019-25230: Kentico Xperience <= 12.0.0 User Widget Information Disclosure

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-18 · updated 2026-06-17
• Weakness: CWE-497

Description

An information disclosure vulnerability in Kentico Xperience allows authenticated users to view sensitive system objects through the live site widget properties dialog. Attackers can exploit this vulnerability to access unauthorized system information without proper access controls.

Affected products

• Kentico Xperience: through 12.0

References

• https://devnet.kentico.com/download/hotfixes
• https://www.vulncheck.com/advisories/kentico-xperience-user-widget-information-disclosure

Get alerted when CVE-2019-25230 or the next vulnerability affects your stack