Cross-site scripting in eZ Platform Kernel

Impact In file upload it is possible by certain means to upload files like .html and .js. These may contain XSS exploits which will be run when links to them are accessed by victims. Patches The fix consists simply of adding common types of scriptable file types to the configuration of the alread...