CVE-2022-50685
BaseFortify
Publication date: 2025-12-18
Last updated on: 2025-12-27
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| kentico | xperience | to 13.0.56 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-79 | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2022-50685 is a stored cross-site scripting (XSS) vulnerability in Kentico Xperience up to version 13.0.56. Authenticated users can upload malicious XML files as page attachments or metafiles. These files contain scripts that are improperly neutralized and get stored on the server. When other users view the affected pages, the malicious scripts execute in their browsers, potentially compromising their security. [1]
How can this vulnerability impact me? :
This vulnerability can allow attackers to execute malicious scripts in the browsers of users who view the affected pages. This can lead to theft of user data, session hijacking, or other malicious actions performed on behalf of the user. Since the attack requires authenticated users to upload malicious XML files, it can be exploited by insiders or compromised accounts. The overall impact is medium severity with low confidentiality and integrity impacts but can still pose a security risk to users. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
Detection involves identifying if malicious XML files have been uploaded as page attachments or metafiles by authenticated users in Kentico Xperience versions up to 13.0.56. Since the vulnerability is exploited via stored XSS through XML uploads, monitoring upload logs for suspicious XML files or scanning the web application for stored XSS payloads in page attachments can help detect exploitation. Specific commands are not provided in the available resources. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include applying the available hotfixes provided by Kentico DevNet to patch the vulnerability. Additionally, restricting or monitoring authenticated user uploads of XML files as page attachments or metafiles can reduce risk until patches are applied. [1]