CVE-2023-41167: Improper Neutralization of Input During Web Page Generation

@webiny/react-rich-text-renderer before 5.37.2 allows XSS attacks by content managers. This is a react component to render data coming from Webiny Headless CMS and Webiny Form Builder. Webiny is an open-source serverless enterprise CMS. The @webiny/react-rich-text-renderer package depends on the...

CVE-2023-41167

@webiny/react-rich-text-renderer before 5.37.2 allows XSS attacks by content managers. This is a react component to render data coming from Webiny Headless CMS and Webiny Form Builder. Webiny is an open-source serverless enterprise CMS. The @webiny/react-rich-text-renderer package depends on the...

PT-2023-27842

Name of the Vulnerable Software and Affected Versions @webiny/react-rich-text-renderer versions prior to 5.37.2 Description The issue arises when a content manager with access to the CMS inserts a malicious script as part of the user-defined input, which is then injected and executed within the...