In short
- CVE-2020-15263 is a MEDIUM (CVSS 6.1) vulnerability affecting orchid/platform, platform (orchid).
- Chance of exploitation in the next 30 days (EPSS): 0.75%, higher than 55.1% of all vulnerabilities.
- Fix: update to 9.4.4 or later.
Description
Impact
Inline attributes have not been processed escape.
If the data that came from users was not processed, then an XSS vulnerability is possible
Patches
Fixed in 9.4.4
NVD description
In platform before version 9.4.4, inline attributes are not properly escaped. If the data that came from users was not escaped, then an XSS vulnerability is possible. The issue was introduced in 9.0.0 and fixed in 9.4.4.
More vulnerabilities in orchid/platform
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free