Skip to content
OpenAdvisories

Package · Packagist

ezsystems/ezplatform-richtext

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High —
    GHSA-2jqj-5qv2-xvcg

    ezsystems/ezplatform-richtext allows access to external entities in XML

    ### Impact This security advisory resolves a vulnerability in the RichText field type. By entering a maliciously crafted input into the RichText XML, an attacker could perform an attack using XML external entity (XXE) injection, which might be able to read fi…

    ezsystems/ezplatform-richtext Packagist
  • Medium —
    GHSA-fxwm-rx68-p5vx

    XSS in richtext custom tag attributes in ezsystems/ezplatform-richtext

    The rich text editor does not escape attribute data when previewing custom tags. This means XSS is possible if custom tags are used, for users who have access to editing rich text content. Frontend content view is not affected, but the vulnerability could be …

    ezsystems/ezplatform-richtext Packagist