Inline attribute values were not processed.

보통 6.1CVE-2020-15263 · GHSA-589w-hccm-265x · Published 19/10/2020 · updated 17/06/2026

요약

CVE-2020-15263은(는) orchid/platform, platform (orchid)에 영향을 주는 보통 (CVSS 6.1) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.75%, 전체 취약점의 55.1%보다 높음.
조치: 9.4.4 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
orchid/platform Packagist	`≥ 9.0.0, < 9.4.4`	`9.4.4`
platform orchid	`≥ 9.0.0, < 9.4.4`	`9.4.4`

Description

Impact

Inline attributes have not been processed escape. If the data that came from users was not processed, then an XSS vulnerability is possible

Patches

Fixed in 9.4.4

NVD description

In platform before version 9.4.4, inline attributes are not properly escaped. If the data that came from users was not escaped, then an XSS vulnerability is possible. The issue was introduced in 9.0.0 and fixed in 9.4.4.

References

orchidsoftware/platform security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2020-15263 · ADVISORY
orchidsoftware/platform commit 03f9a11 · WEB

orchid/platform의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

orchid/platform

Packagist

≥ 9.0.0, < 9.4.4

9.4.4

platform

orchid

≥ 9.0.0, < 9.4.4

9.4.4

Description

Impact

Inline attributes have not been processed escape. If the data that came from users was not processed, then an XSS vulnerability is possible

Patches

Fixed in 9.4.4

NVD description

orchid/platform의 다른 취약점

모두 보기 →