Em resumo
- CVE-2020-15263 é uma vulnerabilidade MÉDIO (CVSS 6.1) que afeta orchid/platform, platform (orchid).
- Chance de exploração nos próximos 30 dias (EPSS): 0.75%, maior que 55.1% das vulnerabilidades.
- Correção: atualize para 9.4.4 ou posterior.
Description
Impact
Inline attributes have not been processed escape.
If the data that came from users was not processed, then an XSS vulnerability is possible
Patches
Fixed in 9.4.4
NVD description
In platform before version 9.4.4, inline attributes are not properly escaped. If the data that came from users was not escaped, then an XSS vulnerability is possible. The issue was introduced in 9.0.0 and fixed in 9.4.4.
Mais vulnerabilidades de orchid/platform
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free