Vulnerabilities (CVE)

Filtered by vendor Kentico Subscribe
Filtered by product Kentico Cms
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-7823 1 Kentico 1 Kentico Cms 2015-10-23 5.8 MEDIUM N/A
Open redirect vulnerability in CMSPages/GetDocLink.ashx in Kentico CMS 8.2 through 8.2.41 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the link parameter.
CVE-2015-7822 1 Kentico 1 Kentico Cms 2015-10-22 5.0 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in Kentico CMS 8.2 allow remote attackers to inject arbitrary web script or HTML via a (1) parameter name to CMSModules/AdminControls/Pages/UIPage.aspx or the (2) CMSBodyClass cookie variable to the default URI.