Hello Guys,Our client using Kentico 13 and found some vulnerabilities here by SonarQube scan: • CVE-2017-9807 • CVE-2017-9802On files: * • CMS/CMSAdminControls/ImageEditor/BaseImageEditor.js * • CM...

We are still on Kentico 10 and failed a PCI scan. Results said XXS vulnerabilities. Not completely understanding Kentico Documentation on how to resolve this. Tested with alert(1) in Search box and...

what are the out-of-box ways in Kentico 10 to prevent cross site scripting attacks. preferably a non-code solution like page directive, web.config keys or client-side scripts in the master page.

Hi Is there any built in Kentico sanitization tonprevent potential cross-site-scripting attacks on scripts written for Transformations?

A couple of vulnerabilities have been made public for Kentico recently. Their source states they've reached out to the vendor (Kentico), the researcher states: @I've contacted the vendor and he fix...

In this article I will describe how cross-site scripting (XSS) works and how to write secure code to avoid this vulnerability. OWASP pages classify cross-site scripting as a high severity vulnerability. XSS is also one of the most frequently exploited vulnerabilities in web applications.

No matter whether you develop websites from scratch or using a CMS system you always need to be concerned about security aspects of the project. In this webinar you get information about common security threats (SQL injection, XSS, XSRF, etc.) and how you can handle those in Kentico CMS project, using Kentico API.