CVE-2025-2878

Name of the Vulnerable Software and Affected Versions Kentico CMS versions up to 13.0.178

Description A vulnerability was found in the Additional Database Installation Wizard component of Kentico CMS, specifically in the file /CMSInstall/install.aspx. The issue is related to the manipulation of the new database argument, which leads to cross-site scripting. This can be exploited remotely.

Recommendations For versions up to 13.0.178, upgrade to version 13.0.179 to address this issue. It is recommended to upgrade the affected Additional Database Installation Wizard component.