Executive brief
Ibexa Admin UI vulnerable to DOM-based Cross-site Scripting in file upload widget
Affected products
- Packagist ibexa/admin-ui
Junglewise Threat Intelligence
CVE-2024-39318: Ibexa Admin UI vulnerable to DOM-based Cross-site Scripting in file upload widget
CVE-2024-39318 · Severity: low · CVSS 3.1 · Published 2024-07-31
Technologies: ibexa/admin-ui (Packagist). Vendors: Packagist.
Related threats
- Ibexa Admin UI XSS vulnerabilities in back office
- Ibexa Admin UI vulnerable to Cross-site Scripting in a field that is used in the Content name pattern
- Ibexa DXP users with the Company admin role can assign any role to any user
- ibexa/admin-ui vulnerable to Cross-site Scripting in content type name/shortname