Skip to content
OpenAdvisories

Package · Packagist

ezsystems/ezplatform-richtext

3 known vulnerabilities.

1 result · Clear filters · Feed

  • High —

    ezsystems/ezplatform-richtext allows access to external entities in XML

    ### Impact This security advisory resolves a vulnerability in the RichText field type. By entering a maliciously crafted input into the RichText XML, an attacker could perform an attack using XML external entity (XXE) injection, which might be able to read fi…