ExploitPublished 13 May 2025

Kentico Xperience 13.0.178 · Cross Site Scripting (XSS)

Source Exploit-DB RSS Feed

Mentioned vulnerabilities

CVE-2025-32370

Severity

Medium

Rated by Threat Radar

Data as of 11 Jun 2025, 21:13 UTC

What to do

AI-suggested

Immediate upgrade to the latest Kentico Xperience version where this vulnerability is patched. If an official patch is not yet available, contact Kentico support for guidance or apply vendor-recommended workarounds.
Implement strict server-side validation and sanitization of uploaded files, especially SVG content, to prevent embedded scripts from executing.
Restrict file upload types and enforce content-type validation to disallow SVG or other potentially dangerous file formats unless absolutely necessary.
Employ Content Security Policy (CSP) headers to restrict the execution of inline scripts and reduce the impact of XSS attacks.
Use Web Application Firewalls (WAF) with rules tuned to detect and block malicious upload attempts and suspicious SVG payloads.
Monitor web server logs for unusual POST requests to the MultiFileUploader.ashx endpoint and investigate any anomalies.
Educate developers and administrators about secure file upload handling and XSS prevention best practices.
Consider disabling or restricting the vulnerable upload endpoint if it is not essential for business operations until a patch is applied.

Description

Kentico Xperience 13.0.178 - Cross Site Scripting (XSS)

Impact

For European organizations using Kentico Xperience 13.0.178 or earlier, this vulnerability poses a significant risk to web application security and user trust. Successful exploitation can lead to session hijacking, unauthorized actions performed on behalf of users, data leakage, and reputational damage. Since the vulnerability allows unauthenticated attackers to upload malicious content, it can be leveraged to target both internal users and external customers. This is particularly concerning for organizations handling sensitive personal data under GDPR, as XSS attacks can facilitate data breaches. The impact extends to potential regulatory fines and loss of customer confidence. Additionally, attackers may use the vulnerability as a foothold to escalate attacks within the network or distribute malware. The medium severity rating suggests that while the vulnerability is serious, it may not directly lead to full system compromise without additional vulnerabilities. However, the ease of exploitation and the public availability of exploit code increase the urgency for mitigation.

Indicators of compromise

Exploit source code

Exploit code for Kentico Xperience 13.0.178 - Cross Site Scripting (XSS)2,296 characters

# Exploit Title: Kentico Xperience 13.0.178 - Cross Site Scripting (XSS)
# Date: 2025-05-09
# Version: Kentico Xperience before 13.0.178
# Exploit Author: Alex Messham
# Contact: ramessham@gmail.com
# Source: https://github.com/xirtam2669/Kentico-Xperience-before-13.0.178---XSS-POC/
# CVE: CVE-2025-32370

import requests
import subprocess
import os
import argparse

def create_svg_payload(svg_filename: str):
    print(f"[*] Writing malicious SVG to: {svg_filename}")
    svg_payload = '''<?xml ver…

References

Community reviews

Loading reviews…