CVE-2023-53737

A stored cross-site scripting vulnerability in Kentico Xperience allows global administrators to inject malicious payloads via the Localization application. Attackers can execute scripts that could affect multiple parts of the administration interface.

Score

CVSS 4.0 5.1 Medium

Status

Modified - disclosure@vulncheck.com

Published

2025-12-18

Last modified

2025-12-30

Weaknesses

CWE-79

Affected products

• Xperience (Kentico)

References

• https://devnet.kentico.com/download/hotfixes
• https://www.vulncheck.com/advisories/kentico-xperience-localization-application-stored-xss2