marmelab

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

marmelab records in CISA KEV

No marmelab vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ra-ui-materialui 1 record MEDIUM React-admin 1 record MEDIUM

Records

2 records

TI-2023-10875 CVE-2023-25572 · GHSA-5jcr-82fh-339v

React-Admin vulnerable to Cross-Site-Scripting attack on `<RichTextField>`

MEDIUM 58

react-admin is a frontend framework for building browser applications on top of REST/GraphQL APIs.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00694 Published 2023-02-13 Fixed in 3.19.12, 4.7.6 CWE-79

TI-2026-76799 CVE-2026-113350 · GHSA-j95f-gmvj-5c83

Stored XSS in react-admin UrlField and FileField

LOW 23

react-admin before 5.15.5 contains a stored cross-site scripting vulnerability that allows attackers to inject scripts by storing javascript: URIs in record fields rendered by UrlField and FileField.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00214 Published 2026-10-20 Fixed in 5.15.5 CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0