{"action":"Upgrade ibexa/fieldtype-richtext to 4.6.21 or later.","affected":[{"fixed":"4.6.21","introduced":"4.6.0-beta1"}],"component":"ibexa/fieldtype-richtext","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["4.6.21"],"ghsa_id":"GHSA-9qv6-4pwm-m68f","id":"tcs_01M5KF089RS4M2F57P4HVDCTQ7","modified_at":"2025-06-13T15:34:52.039785Z","published_at":"2025-06-13T14:51:11Z","references":["https://osv.dev/vulnerability/GHSA-9qv6-4pwm-m68f","https://github.com/ibexa/fieldtype-richtext/security/advisories/GHSA-9qv6-4pwm-m68f","https://github.com/ibexa/fieldtype-richtext/commit/4a4a170c7faa4807ae0f74c581481b835bab3caf","https://developers.ibexa.co/security-advisories/ibexa-sa-2025-003-xss-vulnerabilities-in-back-office","https://github.com/ibexa/fieldtype-richtext"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-9qv6-4pwm-m68f","url":"https://osv.dev/vulnerability/GHSA-9qv6-4pwm-m68f"}],"summary":"Ibexa RichText Field Type XSS vulnerabilities in back office"}