Duplicate Advisory: Cross Site Scripting in eZ Platform Ibexa Kernel

🗓️ 12 Mar 2023 06:30:21Reported by GitHub Advisory DatabaseType

Cross Site Scripting in eZ Platform Ibexa Kernel. File upload allows .html and .js files, which may contain XSS exploits. Patches involve adding scriptable file types to the filetype blacklist configuration.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2021-46875	4 Mar 202521:35	–	circl
CNNVD	Ez Systems eZ Platform 跨站脚本漏洞	12 Mar 202300:00	–	cnnvd
CVE	CVE-2021-46875	12 Mar 202300:00	–	cve
Cvelist	CVE-2021-46875	12 Mar 202300:00	–	cvelist
EUVD	EUVD-2023-0981	3 Oct 202520:07	–	euvd
Github Security Blog	Cross-site scripting in eZ Platform Kernel	19 Mar 202119:56	–	github
NVD	CVE-2021-46875	12 Mar 202305:15	–	nvd
OSV	CVE-2021-46875	12 Mar 202305:15	–	osv
OSV	GHSA-MRVJ-7Q4F-5P42 Cross-site scripting in eZ Platform Kernel	19 Mar 202119:56	–	osv
Prion	Design/Logic Flaw	12 Mar 202305:15	–	prion

Vulners

Node

ezsystems ezplatform-kernelRange1.3.0–1.3.1.1composer

ezsystems ezplatform-kernelRange1.2.0–1.2.5.1composer

ezsystems ezpublish-kernelRange7.5.0–7.5.15.2composer

ezsystems ezpublish-kernelRange6.13.0–6.13.8.2composer

Source	Link
github	www.github.com/ezsystems/ezpublish-kernel/security/advisories/GHSA-mrvj-7q4f-5p42
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-46875
github	www.github.com/ezsystems/ezpublish-kernel/commit/29fecd2afe86f763510f10c02f14962d028f311b
github	www.github.com/advisories/GHSA-c737-jhwr-fqxj

02 Feb 2026 19:55Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.16.1

EPSS0.00398

SSVC

CWE-79