CVE-2021-27581: Kentico CMS

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

The Blog module in Kentico CMS 5.5 R2 build 5.5.3996 allows SQL injection via the tagname parameter.

Affected products

• Kentico Kentico CMS: version 5.5 only

Published 2021-03-05. Last modified 2026-06-17.