Medium SSA-190588 1 CVE

SSA-190588: Cross-Site Scripting Vulnerability in Mendix Rich Text Widget

Published Nov 17, 2025 · Updated Nov 17, 2025

Vendor: Siemens Product: Mendix RichText

Summary

Mendix RichText editor contain a cross-site scripting vulnerability.

Siemens has released a new version for Mendix RichText and recommends to update to the latest version.

Vulnerabilities 1

Medium 5.7

CVE-2025-40834

A vulnerability has been identified in Mendix RichText (All versions >= V4.0.0 < V4.6.1). Affected widget does not prop…

Siemens Mendix RichText ICS / OT

Nov 17, 2025

Revision history

2025-11-17 #1
Publication Date

References

SSA-190588: Cross-Site Scripting Vulnerability in Mendix Rich Text Widget - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-190588.html