Kentico CMS vulnerabilities

Latest Kentico CMS CVEs

Newest publication first

1. CVE-2025-2878 Kentico CMS Additional Database Installation Wizard install.aspx cross site scripting

   Published 2025-03-27

   Medium·CVSS 4.8 EPSS 0.32%

   A vulnerability was found in Kentico CMS up to 13.0.178. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /CMSInstall/install.aspx of the component Additional Database Installation Wizard. The manipulation of the argument...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.