CVE-2024-12907 | Kentico CMS 7 GET Request Parameter AccessDenied.aspx cross site scripting

A vulnerability, which was classified as problematic, has been found in Kentico CMS 7. This issue affects some unknown processing of the file to /CMSMessages/AccessDenied.aspx of the component GET Request Parameter Handler. The manipulation leads to cross site scripting. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

The identification of this vulnerability is CVE-2024-12907. The attack may be initiated remotely. There is no exploit available.