Skip to content
OpenAdvisories

Product · marmelab

react-admin

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-113350

    react-admin before 5.15.5 Stored XSS via UrlField and FileField

    react-admin before 5.15.5 contains a stored cross-site scripting vulnerability that allows attackers to inject scripts by storing javascript: URIs in record fields rendered by UrlField and FileField. Attackers who can influence URL-type backend fields can exe…

    marmelab react-admin
  • Medium 5.4
    CVE-2023-25572

    React-Admin vulnerable to Cross-Site-Scripting attack on `<RichTextField>`

    react-admin is a frontend framework for building browser applications on top of REST/GraphQL APIs. react-admin prior to versions 3.19.12 and 4.7.6, along with ra-ui-materialui prior to 3.19.12 and 4.7.6, are vulnerable to cross-site scripting. All React appli…

    marmelab react-admin ra-ui-materialui react-admin npm