Kentico Kentico Cms — known CVE vulnerabilities

Every CVE whose affected-product data names Kentico Kentico Cms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2021-27581 — CVSS 9.8 (critical): The Blog module in Kentico CMS 5.5 R2 build 5.5.3996 allows SQL injection via the tagname parameter.
• CVE-2015-7823 — CVSS 5.8 (medium): Open redirect vulnerability in CMSPages/GetDocLink.ashx in Kentico CMS 8.2 through 8.2.41 allows remote attackers to redirect users to…
• CVE-2015-7822 — CVSS 5.0 (medium): Multiple cross-site scripting (XSS) vulnerabilities in Kentico CMS 8.2 allow remote attackers to inject arbitrary web script or HTML via a…