Mendix RichText Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability has been identified in the Mendix RichText widget, affecting all versions from 4.0.0 up to, but not including, 4.6.1. The vulnerability arises because the widget does not properly sanitize user input, potentially allowing attackers to execute cross-site scripting attacks.

Impact

Exploitation of this vulnerability allows for cross-site scripting attacks, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Remediation

Users are advised to update to version 4.6.1 or later. The latest version can be downloaded from the Mendix Marketplace.