EDB-48864
PoCKentico CMS 9.0-12.0.49 - Persistent Cross Site Scripting
view exploit source exploit_dbtype webappsauthor Ataberk YAVUZERpublished 2020-10-09catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-19493US | medium5.4 | Exploit | ||
Kentico before 12.0.50 allows file uploads in which the Content-Type header is inconsistent with the file extension, leading to XSS. | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan