GHSA-99rh-vxmc-7wgf
ezplatform-admin-ui Cross-site Scripting (XSS) vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | ezsystems/ezplatform-admin-ui | >= 1.3, < 1.3.5 | 1.3.5 |
| Packagist | ezsystems/ezplatform-admin-ui | >= 1.4, < 1.4.4 | 1.4.4 |
Details
As written in the advisory (Markdown source, shown as plain text).
An XSS issue was discovered in the Admin UI in eZ Platform 2.x. This affects ezplatform-admin-ui 1.3.x before 1.3.5 and 1.4.x before 1.4.4, and ezplatform-page-builder 1.1.x before 1.1.5 and 1.2.x before 1.2.4.
References
External links from the advisory. They lead to third-party sites.