Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Reflected Cross-Site Scripting vulnerability in "Design" on "Edit device layout" in Kentico 9 through 11 allows remote attackers to execute malicious JavaScript via a malicious devicename parameter in a link that is entered via the "Pages -> Edit template properties -> Device Layouts -> Create device layout (and edit created device layout) -> Design" screens. NOTE: the vendor has responded that there is intended functionality for authorized users to edit and update ascx code layout
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Kentico 跨站脚本漏洞
Vulnerability Description
Kentico是美国Kentico软件公司的一套基于ASP.NET的内容管理系统（CMS）。该系统主要由两大工具组成：Kentico CMS Desk是用于编辑网页中的内容；Kentico CMS Controls是用于编辑和控制网页中各种元素。Edit device layout是其中的一个布局编辑模块。 Kentico 9版本至11版本中的Edit device layout的Design存在跨站脚本漏洞。远程攻击者可借助链接中恶意的‘devicename’参数利用该漏洞执行恶意的JavaScript
CVSS Information
N/A
Vulnerability Type
N/A