Description
A vulnerability has been identified in Mendix RichText (All versions >= V4.0.0 < V4.6.1). Affected widget does not properly neutralize the input. This could allow an attacker to execute cross-site scripting attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Mendix RichText | V4.0.0 – < V4.6.1 | V4.6.1 |
Advisories 1
- SSA-190588 SSA-190588: Cross-Site Scripting Vulnerability in Mendix Rich Text Widget Siemens ProductCERT · Nov 17, 2025