Kentico

Security Scorecard

Score

94B

Total CVEs

19

Patch Rate

84%

16 patched

Avg Response

-

days to patch

Critical Gaps

0

exploitable, no detection

Severity Breakdown

Critical0
High5
Medium14
Low0

Patch Status

Patched16 (84%)
Partial/Workaround1 (5%)
Unpatched2 (11%)

CVEs (24)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-5591Kentico Xperience 13 Cross-Site Scripting VulnerabilityMedium5.4-Patched
CVE-2019-25229Kentico Xperience MVC Form File Upload VulnerabilityHigh8.8-Patched
CVE-2021-47711Kentico Xperience Online Marketing Macro SQL InjectionHigh8.8-Patched
CVE-2023-53934Kentico Xperience GetResource Handler Denial of ServiceHigh7.5-Patched
CVE-2021-47712Kentico Xperience URL Hashing VulnerabilityHigh7.5-Patched
CVE-2020-36890Kentico Xperience Access Control BypassHigh7.29dUnpatched
CVE-2024-58318Kentico Xperience Rich Text Editor Stored XSSMedium5.4-Patched
CVE-2024-58319Kentico Xperience Pages Dashboard Widget Reflected XSSMedium5.4-Patched
CVE-2024-58317Kentico Xperience Cookie Security Configuration VulnerabilityMedium5.3-Patched
CVE-2024-58320Kentico Xperience Authentication Information DisclosureMedium5.3-Patched