CVE-2023-53736: Kentico Xperience

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

A reflected cross-site scripting vulnerability in Kentico Xperience allows authenticated users to inject malicious scripts in the administration interface. Attackers can exploit this vulnerability to execute arbitrary scripts within the administrative context.

Affected products

• Kentico Xperience: up to and including 13.0.120

Published 2025-12-18. Last modified 2026-06-17.