CVE-2012-1597: Ez Ezjscore

Low severity, CVSS 2.6. EPSS: 4.1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the textEncode function in classes/ezjscajaxcontent.php in eZ JS Core in eZ Publish before 1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• Ez Ezjscore: up to and including 1.4; version 1.0 only

Published 2012-08-17. Last modified 2026-06-16.