What’s Vulnerable › Vulnerabilities

CVE-2024-58322: Kentico Xperience <= 13.0.158 Shipping Options Stored XSS

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-18 · updated 2026-06-17
• Weakness: CWE-79

Description

A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious code into shipping options configuration. This could lead to potential theft of sensitive data by executing malicious scripts in users' browsers.

Affected products

• Kentico Xperience: through 13.0.158

References

• https://devnet.kentico.com/download/hotfixes
• https://www.vulncheck.com/advisories/kentico-xperience-shipping-options-stored-xss

Get alerted when CVE-2024-58322 or the next vulnerability affects your stack