Executive brief
eZ Platform Admin UI vulnerable to DOM-based Cross-site Scripting in file upload widget
Affected products
- Packagist ezsystems/ezplatform-admin-ui
Junglewise Threat Intelligence
eZ Platform Admin UI vulnerable to DOM-based Cross-site Scripting in file upload widget
Severity: low · CVSS 3.1 · Published 2024-07-31
Technologies: ezsystems/ezplatform-admin-ui (Packagist). Vendors: Packagist.
Related threats
- ezsystems/ezplatform-admin-ui has an XSS vulnerability in Cancel/Reschedule future publication modal
- Ibexa eZ Platform Admin UI XSS vulnerabilities in back office
- eZ Platform Password reset vulnerability
- ezplatform-admin-ui vulnerable to Cross-Site Scripting (XSS)
- Improper Certificate Validation in node-sass affects eZ Platform