Skip to content
OpenAdvisories
Medium · 6.1 CVE-2019-12139 EUVD-2022-3342GHSA-99rh-vxmc-7wgf

ezplatform-admin-ui Cross-site Scripting (XSS) vulnerability

Published May 16, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

An XSS issue was discovered in the Admin UI in eZ Platform 2.x. This affects ezplatform-admin-ui 1.3.x before 1.3.5 and 1.4.x before 1.4.4, and ezplatform-page-builder 1.1.x before 1.1.5 and 1.2.x before 1.2.4.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist ezsystems/ezplatform-admin-ui >= 1.3, < 1.3.5 1.3.5 GHSA-99rh-vxmc-7wgf
Packagist ezsystems/ezplatform-admin-ui >= 1.4, < 1.4.4 1.4.4 GHSA-99rh-vxmc-7wgf

References