| Package | Affected versions | Patched versions |
|---|---|---|
| xperience | ≥ 9.0, < 12.0.50 | 12.0.50 |
Kentico before 12.0.50 allows file uploads in which the Content-Type header is inconsistent with the file extension, leading to XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free