En bref
- CVE-2020-15263 est une vulnérabilité MOYENNE (CVSS 6.1) touchant orchid/platform, platform (orchid).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.75%, plus élevée que 55.1% des vulnérabilités.
- Correctif : mettre à jour vers 9.4.4 ou plus récent.
Description
Impact
Inline attributes have not been processed escape.
If the data that came from users was not processed, then an XSS vulnerability is possible
Patches
Fixed in 9.4.4
NVD description
In platform before version 9.4.4, inline attributes are not properly escaped. If the data that came from users was not escaped, then an XSS vulnerability is possible. The issue was introduced in 9.0.0 and fixed in 9.4.4.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free