Packagist/ibexa/fieldtype-richtext: medium
ibexa/fieldtype-richtext has an XSS vulnerability via acronym custom tag in Rich Text
Action: Upgrade ibexa/fieldtype-richtext to 4.6.25 or later.
composer require ibexa/fieldtype-richtext:5.0.3composer require ibexa/fieldtype-richtext:4.6.25Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.0.3 | - |
| 4.6.0 | 4.6.25 | - |
Fixed versions
| 5.0.3 | 4.6.25 |
Sources
- osv: GHSA-8c2g-f8jm-5cr7
- https://github.com/ibexa/fieldtype-richtext/security/advisories/GHSA-8c2g-f8jm-5cr7
- https://developers.ibexa.co/security-advisories/ibexa-sa-2025-004-xss-and-enumeration-vulnerabilities-in-back-office
- https://github.com/ibexa/fieldtype-richtext
published · modified · JSON