CVE-2023-53737: Kentico Xperience

Medium severity, CVSS 4.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A stored cross-site scripting vulnerability in Kentico Xperience allows global administrators to inject malicious payloads via the Localization application. Attackers can execute scripts that could affect multiple parts of the administration interface.

Affected products

• Kentico Xperience: up to and including 13.0.101

Published 2025-12-18. Last modified 2026-06-17.