Unrated severityNVD Advisory· Published Jan 5, 2026· Updated Jan 5, 2026
Stored Cross-site Scripting (XSS) in Kentico Xperience 13
CVE-2025-5591
Description
Kentico Xperience 13 is vulnerable to a stored cross-site scripting attack via a form component, allowing an attacker to hijack a victim user’s session and perform actions in their security context.
Affected products
2- Kentico/Kentico Xperiencev5Range: 13.0.167
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.