p PatchFirst

PatchFirst · Latest vulnerabilities

ezsystems/demobundle vulnerabilities

Vulnerabilities published for ezsystems/demobundle in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. GHSA-8c85-4rr5-chr4

    Not ratedFix available

    Cross-site Scripting (XSS) in DemoBundle/ezdemo bundled VideoJS

    This Security Advisory is about a vulnerability in VideoJS, which is bundled in DemoBundle and the ezdemo legacy extension. Older releases of VideoJS contain an XSS vulnerability in the Flash-based video player. This is bundled in DemoBundle, and in the Legacy "ezdemo" and "ezdemo-ls-extension" extensions. Among the branches still receiving security advisories, only eZ Publish Platform 5.4 and eZ Publish Legacy 5.4 are affected. However, it may be possible to make this software work in newer branches, so please check whether you have it installed even if you're using eZ Platform 1.x or 2.x. Because DemoBundle / ezdemo are only intended for d

    ezsystems/demobundlePHP
    • Update to 5.4.6.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →