CVSS: 4.8
Affected versions: 22.0.0 - 29.6.3
Category: XSS
The rich text editor in the administration was vulnerable to self-cross-site scripting attacks (XSS) due to improper input validation when switching between Text and Code View mode. To eliminate this vulnerability, additional sanitization was added to the switch of the view mode action.
Update to the latest version. See Update Xperience by Kentico projects for detailed instructions.