CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. See the original NVD description below for full technical details.
CVE
CVE-2022-50684
Severity
MEDIUM
CVSS
6.1
EPSS
0.17%
Original NVD Description
An HTML injection vulnerability in Kentico Xperience allows attackers to inject malicious HTML values into form submission emails via unencoded form fields. Unencoded form values could enable HTML content execution in recipient email clients, potentially compromising email security.
Related CVEs
Other vulnerabilities affecting the same vendor(s)