Is ezsystems/ezplatform-admin-ui vulnerable?

Composer ezsystems/ezplatform-admin-ui has 11 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.

11advisories
2critical
0on CISA KEV
0no fix recorded
CVETitleSeverityCVSSAffectedFixed in
CVE-2019-12139ezplatform-admin-ui Cross-site Scripting (XSS) vulnerabilitymedium6.1>=1.3 and <1.3.5 or >=1.4 and <1.4.4 or >=1.3.0 and <1.3.5 or >=1.4.0 and <1.4.41.3.5, 1.4.4
GHSA-gc5h-6jx9-q2qheZ Platform Admin UI vulnerable to DOM-based Cross-site Scripting in file upload widgetmedium5.4>=3.3.0 and <3.3.393.3.39
GHSA-6v6p-g8cg-2hggImproper Certificate Validation in node-sass affects eZ Platformmedium5.3>=1.5.0 and <1.5.271.5.27
2019-04-03-1EZSA-2019-002 Password reset vulnerabilityunknown0.0>=1.4.0 and <1.4.61.4.6
GHSA-58h5-h554-429qezplatform-admin-ui vulnerable to Cross-Site Scripting (XSS)critical0.0>=2.3.0 and <2.3.262.3.26
GHSA-99c7-c3mw-mxhvezsystems/ezplatform-admin-ui has an XSS vulnerability in Cancel/Reschedule future publication modalmedium0.0>=2.3.0 and <2.3.392.3.39
GHSA-9jp8-cwwx-p64qXSS in richtext custom tag attributes in ezsystems/ezplatform-richtextmedium0.0>=1.5.0 and <1.5.25.11.5.25.1
GHSA-cg84-55jx-4237eZ Platform Password reset vulnerabilityhigh0.0>=1.4.0 and <1.4.61.4.6
GHSA-pcpm-vc4v-cmvxeZ Platform users with the Company admin role can assign any role to any usercritical0.0>=1.5.0 and <1.5.29 or >=2.3.0 and <2.3.261.5.29, 2.3.26
GHSA-q73v-79x3-jv2weZ Platform Admin UI Cross-site Scripting vulnerabilityhigh0.0>=1.3.0 and <1.3.5 or >=1.4.0 and <1.4.41.3.5, 1.4.4
GHSA-r7pm-mw8g-p7pxIbexa eZ Platform Admin UI XSS vulnerabilities in back officemedium0.0>=2.3.0-beta1 and <2.3.382.3.38

Am I affected?

Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.

# one-time install
pip install phpwarden

# then
phpwarden deps composer.lock

Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command

Install docs   How findings are ranked
A version is vulnerable when it falls inside an affected range and below the fixed version. phpwarden applies these ranges to the exact versions in your lockfile or install, so you only see what applies to you.