CVE-2023-53737

5.1 mediumEPSS 0.2%

Medium (5.1) in kentico xperience. EPSS 0.2% chance of exploitation in the next 30 days.

A stored cross-site scripting vulnerability in Kentico Xperience allows global administrators to inject malicious payloads via the Localization application. Attackers can execute scripts that could affect multiple parts of the administration interface.

Severity

CVSS 4.0

5.1 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

CVSS 3.1

4.8 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 6% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2025-12-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

kentico:xperience

References

https://devnet.kentico.com/download/hotfixes
https://www.vulncheck.com/advisories/kentico-xperience-localization-application-stored-xss2

Check your stack JSON