CVE-2025-2878

MEDIUM Year: 2025
CVSS v3 Score
2.4
Low
CVSS v2 Score
3.3
Low
Weakness Type
CWE-79
View all →

Vulnerability Description

A vulnerability was found in Kentico CMS up to 13.0.178. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /CMSInstall/install.aspx of the component Additional Database Installation Wizard. The manipulation of the argument new database leads to cross site scripting. The attack can be launched remotely. Upgrading to version 13.0.179 is able to address this issue. It is recommended to upgrade the affected component.

Related Vulnerabilities

CVE-2019-11281

LOW
CVSS:2.4(Low)

Pivotal RabbitMQ, versions prior to v3.7.18, and RabbitMQ for PCF, versions 1.15.x prior to 1.15.13, versions 1.16.x prior to 1.16.6, and versions 1.17.x prior to 1.17.3, contain two components, the v...

CWE-792019

CVE-2022-0986

LOW
CVSS:2.4(Low)

Reflected Cross-site Scripting (XSS) Vulnerability in GitHub repository hestiacp/hestiacp prior to 1.5.11.

CWE-792022

CVE-2023-0676

LOW
CVSS:2.4(Low)

Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prior to 1.5.1.

CWE-792023

CVE-2023-7259

MEDIUM
CVSS:2.4(Low)

** DISPUTED ** A vulnerability was found in zzdevelop lenosp up to 20230831. It has been classified as problematic. This affects an unknown part of the component Adduser Page. The manipulation of the ...

CWE-792023

CVE-2024-10477

MEDIUM
CVSS:2.4(Low)

A vulnerability classified as problematic was found in LinZhaoguan pb-cms up to 2.0.1. This vulnerability affects unknown code of the file /admin#permissions of the component Permission Management Pag...

CWE-792024

CVE-2024-10478

MEDIUM
CVSS:2.4(Low)

A vulnerability, which was classified as problematic, has been found in LinZhaoguan pb-cms up to 2.0.1. This issue affects some unknown processing of the file /admin#article/edit?id=2 of the component...

CWE-792024