CVSS: 6.9
Affected versions: 22.0.0 - 29.7.3
Category: XSS
The kenticoactivitylogger endpoint was vulnerable to reflected cross-site scripting attacks (XSS) due to improper input validation of the request parameters. To eliminate this vulnerability, additional validation was added to the logger endpoint.
Update to the latest version. See Update Xperience by Kentico projects for detailed instructions.