CVE-2025-32369: Kentico Xperience

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Kentico Xperience before 13.0.181 allows authenticated users to distribute malicious content (for stored XSS) via certain interactions with the media library file upload feature.

Affected products

• Kentico Xperience: before 13.0.181 (fixed in 13.0.181)

Published 2025-04-06. Last modified 2026-06-17.