https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T01:16:50.097618+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-32370 CVE-2025-32370 2026-10-06T01:16:50.115970+00:00

Affected: Kentico Xperience

Kentico Xperience before 13.0.178 has a specific set of allowed ContentUploader file extensions for unauthenticated uploads; however, because .zip is processed through TryZipProviderSafe, there is additional functionality to create files with other extensions. NOTE: this is a separate issue not necessarily related to SVG or XSS.