In breve
- CVE-2020-15263 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda orchid/platform, platform (orchid).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.75%, superiore al 55.1% delle vulnerabilità.
- Correzione: aggiornare a 9.4.4 o successiva.
Description
Impact
Inline attributes have not been processed escape.
If the data that came from users was not processed, then an XSS vulnerability is possible
Patches
Fixed in 9.4.4
NVD description
In platform before version 9.4.4, inline attributes are not properly escaped. If the data that came from users was not escaped, then an XSS vulnerability is possible. The issue was introduced in 9.0.0 and fixed in 9.4.4.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free