webiny @webiny/react-rich-text-renderer vulnerabilities

Latest webiny @webiny/react-rich-text-renderer CVEs

Newest publication first

1. CVE-2023-41167 @webiny/react-rich-text-renderer vulnerable to insecure rendering of rich text content

   Published 2023-08-25

   Medium·CVSS 4.8 EPSS 0.39%

   @webiny/react-rich-text-renderer before 5.37.2 allows XSS attacks by content managers. This is a react component to render data coming from Webiny Headless CMS and Webiny Form Builder. Webiny is an open-source serverless enterprise CMS. The @webiny/react-rich-text-renderer packag...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.