CVE-2019-19493

Kentico before 12.0.50 allows file uploads in which the Content-Type header is inconsistent with the file extension, leading to XSS.

Kentico before 12.0.50 allows file uploads in which the Content-Type header is inconsistent with the file extension, leading to XSS.

Kentico versiones anteriores a 12.0.50, permite la carga de archivos en los que el encabezado Content-Type es inconsistente con la extensión del archivo, conllevando a una vulnerabilidad de tipo XSS.