p PatchFirst

PatchFirst · Latest vulnerabilities

ezsystems/ezfind-ls vulnerabilities

Vulnerabilities published for ezsystems/ezfind-ls in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. GHSA-9cq2-pcgr-8h62

    Not ratedFix available

    Cross-site Scripting in eZFind spellcheck

    This security advisory fixes a vulnerability in the legacy eZ Find extension, which can be used with the LegacyBridge in eZ Platform. It affects sites using the "Did you mean...?" spell check / search suggestion feature. This feature is vulnerable to Cross-site Scripting (XSS) injection (reflected XSS). The update adds the necessary escaping of injected code. If you're affected, we recommend that you install it as soon as possible. If you have custom search templates, please make sure you update these as well. Ensure that "search_extras.spellcheck_collation" is followed by the "wash" operator, like this: {$search_extras.spellcheck_collation

    ezsystems/ezfind-ls ezsystems/ezfind-ls ezsystems/ezfind-lsPHP
    • Update to 2017.12.0.1
    • Update to 5.3.6.1
    • Update to 5.4.11.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →