Skip to content
OpenAdvisories

Vendor

ibexa

4 known vulnerabilities.

Products

admin-ui 2 fieldtype-richtext 1 user 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.5
    CVE-2025-67719

    Ibexa User Bundle is missing password change validation

    Ibexa is a composable end-to-end DXP (Digital Experience Platform). Versions 5.0.0-beta1 through 5.0.3 do not have password validation. During the transition from v4 to v5 an error was introduced into validation code which causes the validation of the previou…

    ibexa user ibexa/user Packagist
  • High 7.2
    CVE-2024-43369

    Persistent Cross-site Scripting in Ibexa RichText Field Type

    Ibexa RichText Field Type is a Field Type for supporting rich formatted text stored in a structured XML format. In versions on the 4.6 branch prior to 4.6.10, the validator for the RichText fieldtype blocklists `javascript:` and `vbscript:` in links to preven…

    ibexa fieldtype-richtext ibexa/fieldtype-richtext Packagist