{"action":"Upgrade ezsystems/ezplatform-admin-ui to 3.3.39 or later.","affected":[{"fixed":"3.3.39","introduced":"3.3.0"}],"component":"ezsystems/ezplatform-admin-ui","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["3.3.39"],"ghsa_id":"GHSA-gc5h-6jx9-q2qh","id":"tcs_01M5KF2KN62TN8QKXRMHWT9WKE","modified_at":"2026-02-04T04:01:43.647343Z","published_at":"2024-07-31T17:01:59Z","references":["https://osv.dev/vulnerability/GHSA-gc5h-6jx9-q2qh","https://github.com/ezsystems/ezplatform-admin-ui/security/advisories/GHSA-gc5h-6jx9-q2qh","https://github.com/ibexa/admin-ui/security/advisories/GHSA-qm44-wjm2-pr59","https://github.com/ezsystems/ezplatform-admin-ui/commit/7a9f991b200fa5a03d49cd07f50577c8bc90a30b","https://developers.ibexa.co/security-advisories/ibexa-sa-2024-004-dom-based-xss-in-file-upload","https://github.com/ezsystems/ezplatform-admin-ui"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-gc5h-6jx9-q2qh","url":"https://osv.dev/vulnerability/GHSA-gc5h-6jx9-q2qh"}],"summary":"eZ Platform Admin UI vulnerable to DOM-based Cross-site Scripting in file upload widget"}