Description
An issue was discovered in eZ Platform Ibexa Kernel before 1.3.1.1. An XSS attack can occur because JavaScript code can be uploaded in a .html or .js file.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | ezsystems/ezplatform-kernel | < 1.2.5.1 | 1.2.5.1 | GHSA-mrvj-7q4f-5p42 |
| Packagist | ezsystems/ezplatform-kernel | >= 1.3.0, < 1.3.1.1 | 1.3.1.1 | GHSA-mrvj-7q4f-5p42 |
| Packagist | ezsystems/ezpublish-kernel | < 6.13.8.2 | 6.13.8.2 | GHSA-mrvj-7q4f-5p42 |
| Packagist | ezsystems/ezpublish-kernel | >= 7.0.0, < 7.5.15.2 | 7.5.15.2 | GHSA-mrvj-7q4f-5p42 |