Packagist/ezsystems/ezplatform-richtext: medium
XSS in richtext custom tag attributes in ezsystems/ezplatform-richtext
Action: Upgrade ezsystems/ezplatform-richtext to 2.3.7.1 or later.
composer require ezsystems/ezplatform-richtext:2.3.7.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.3.0 | 2.3.7.1 | - |
Fixed versions
| 2.3.7.1 |
Sources
- osv: GHSA-fxwm-rx68-p5vx
- https://github.com/ezsystems/ezplatform-richtext/security/advisories/GHSA-fxwm-rx68-p5vx
- https://github.com/ezsystems/ezplatform-richtext/commit/3cebfe2ae4c22e6590632a0ff71893854a16afc5
- https://developers.ibexa.co/security-advisories/ibexa-sa-2021-010-xss-in-richtext-custom-tag-attributes
- https://github.com/ezsystems/ezplatform-richtext
published · modified · JSON