CVE-2025-40834: Siemens Mendix Richtext

Medium severity, CVSS 5.7. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability has been identified in Mendix RichText (All versions >= V4.0.0 < V4.6.1). Affected widget does not properly neutralize the input. This could allow an attacker to execute cross-site scripting attacks.

Affected products

• Siemens Mendix Richtext: from V4.0.0, before V4.6.1 (fixed in V4.6.1)

Published 2025-11-17. Last modified 2026-10-07.