Vulnerability Database

With exploit

ez / ezplatform-admin-ui

Title Severity Exploit Date Affected Version
CVE-2019-12139 Medium May 16, 2019 >= 1.3.0 < 1.3.5
>= 1.4.0 < 1.4.4

ezsystems / ezplatform-admin-ui

Title Severity Exploit Date Affected Version
Ibexa eZ Platform Admin UI XSS vulnerabilities in back office Medium Jun 13, 2025 >= 2.3.0-beta1 < 2.3.38
eZ Platform Admin UI vulnerable to DOM-based Cross-site Scripting in file upload widget Medium Jul 31, 2024 >= 3.3.0 < 3.3.39
eZ Platform Admin UI Cross-site Scripting vulnerability High May 15, 2024 >= 1.3.0 < 1.3.5
>= 1.4.0 < 1.4.4
eZ Platform Password reset vulnerability High May 15, 2024 >= 1.4.0 < 1.4.6
eZ Platform users with the Company admin role can assign any role to any user Critical Nov 10, 2022 >= 1.5.0 < 1.5.29
>= 2.3.0 < 2.3.26
ezplatform-admin-ui vulnerable to Cross-Site Scripting (XSS) Critical Nov 10, 2022 >= 2.3.0 < 2.3.26
Improper Certificate Validation in node-sass affects eZ Platform Medium Apr 1, 2022 >= 1.5.0 < 1.5.27
XSS in richtext custom tag attributes in ezsystems/ezplatform-richtext Medium Dec 1, 2021 >= 1.5.0 < 1.5.25.1