VULNERABILITY INTELLIGENCE

CVE-2023-53738

CVSS score5.4 MEDIUM

EPSS probability0.20%

CISA KEVNot currently listed

Published2025-12-18

Last modified2026-06-17

Description

A reflected cross-site scripting vulnerability in Kentico Xperience allows authenticated users to inject malicious scripts via page preview URLs. Attackers can exploit this vulnerability to execute arbitrary scripts in users' browsers during page preview interactions.