| Package | Affected versions | Patched versions |
|---|---|---|
| xperience | ≥ 13.0.0, < 13.0.167 | 13.0.167 |
Kentico Xperience 13 is vulnerable to a stored cross-site scripting attack via a form component, allowing an attacker to hijack a victim user’s session and perform actions in their security context.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free