{"action":"Upgrade ezsystems/ezplatform-richtext to 2.3.7.1 or later.","affected":[{"fixed":"2.3.7.1","introduced":"2.3.0"}],"component":"ezsystems/ezplatform-richtext","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.3.7.1"],"ghsa_id":"GHSA-fxwm-rx68-p5vx","id":"tcs_01M5KF25XZ236R32CSQQ3V755C","modified_at":"2024-11-29T05:42:57.262192Z","published_at":"2021-12-01T18:28:29Z","references":["https://osv.dev/vulnerability/GHSA-fxwm-rx68-p5vx","https://github.com/ezsystems/ezplatform-richtext/security/advisories/GHSA-fxwm-rx68-p5vx","https://github.com/ezsystems/ezplatform-richtext/commit/3cebfe2ae4c22e6590632a0ff71893854a16afc5","https://developers.ibexa.co/security-advisories/ibexa-sa-2021-010-xss-in-richtext-custom-tag-attributes","https://github.com/ezsystems/ezplatform-richtext"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-fxwm-rx68-p5vx","url":"https://osv.dev/vulnerability/GHSA-fxwm-rx68-p5vx"}],"summary":"XSS in richtext custom tag attributes in ezsystems/ezplatform-richtext"}