ibexa

Products

Product	CVEs	Exploited	Latest
admin-ui	2	–	Nov 29, 2024
fieldtype-richtext	1	–	Aug 15, 2024
user	1	–	Dec 11, 2025

CVE-2025-67719 High 8.5 Ibexa User Bundle is missing password change validation 0.1%
CVE-2024-53864 Medium 5.3 Cross-site Scripting in a field that is used in the Content name pattern in ibexa/admin-ui 0.5%
CVE-2024-43369 High 7.2 Persistent Cross-site Scripting in Ibexa RichText Field Type 0.4%
CVE-2024-39318 Medium 5.4 Ibexa Admin UI vulnerable to DOM-based Cross-site Scripting in file upload widget 0.4%