Skip to content
OpenAdvisories

Package · Packagist

ibexa/fieldtype-richtext

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High —
    GHSA-cj3w-g42v-wcj6

    ibexa/fieldtype-richtext allows access to external entities in XML

    ### Impact This security advisory resolves a vulnerability in the RichText field type. By entering a maliciously crafted input into the RichText XML, an attacker could perform an attack using XML external entity (XXE) injection, which might be able to read fi…

    ibexa/fieldtype-richtext Packagist
  • High 7.2
    CVE-2024-43369

    Persistent Cross-site Scripting in Ibexa RichText Field Type

    Ibexa RichText Field Type is a Field Type for supporting rich formatted text stored in a structured XML format. In versions on the 4.6 branch prior to 4.6.10, the validator for the RichText fieldtype blocklists `javascript:` and `vbscript:` in links to preven…

    ibexa fieldtype-richtext ibexa/fieldtype-richtext Packagist