Vigilance.fr - Ibexa DXP: Cross Site Scripting via Back Office, analyzed on 20/08/2026

Written by Vigilance.fr

An attacker can trigger a Cross Site Scripting of Ibexa DXP, via Back Office, in order to run JavaScript code in the context of the web site.

Read more at Vigilance.fr

Articles similaires

Security Vulnerability

21 October 2026

Vigilance.fr - Microsoft Word: information disclosure dated 21/08/2026

An attacker can bypass access restrictions to data of Microsoft Word, dated 21/08/2026, in order (…)

Security Vulnerability

21 October 2026

Vigilance.fr - Spring Framework: multiple vulnerabilities dated 21/08/2026

An attacker can use several vulnerabilities of Spring Framework, dated 21/08/2026.

Security Vulnerability

21 October 2026

Vigilance.fr - OTRS Help Desk: code execution via PGP Configuration, analyzed on 21/08/2026

An attacker can use a vulnerability of OTRS Help Desk, via PGP Configuration, in order to run code.