Security advisories

medium2025-10-17

ibexa/admin-ui has an XSS vulnerability in Cancel/Reschedule future publication modal

GHSA-2mx6-fq24-g2mh

medium2025-06-13

Ibexa Admin UI XSS vulnerabilities in back office

GHSA-5r6x-g6jv-4v87

medium2024-12-02

Ibexa Admin UI vulnerable to Cross-site Scripting in a field that is used in the Content name pattern

GHSA-8w3p-gf85-qcch · CVE-2024-53864

medium2024-07-31

Ibexa Admin UI vulnerable to DOM-based Cross-site Scripting in file upload widget

GHSA-qm44-wjm2-pr59 · CVE-2024-39318

critical2022-11-10

Ibexa DXP users with the Company admin role can assign any role to any user

GHSA-g6jc-xrc3-4wwq

critical2022-11-10

ibexa/admin-ui vulnerable to Cross-site Scripting in content type name/shortname

GHSA-7644-cxp8-h23r