Threats tagged 'ghsa-7xr6-x66r-h3w5'

A cross-site scripting (XSS) vulnerability exists in Mendix RichText versions 4.0.0 up to but not including 4.6.1. The affected widget does not properly neutralize input, which could allow an attacker with limited privileges to execute script code in the context of the user's browser. This vulnerability has a medium severity rating with a CVSS score of 5.7.