Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-15263
8
HIGHCVSS v3
Published
October 19, 2020
CVSS v2
4.3 MEDIUM
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
In platform before version 9.4.4, inline attributes are not properly escaped. If the data that came from users was not escaped, then an XSS vulnerability is possible. The issue was introduced in 9.0.0 and fixed in 9.4.4.
orchidsoftware/platform
GitHubOrchid is a @laravel package that allows for rapid application development of back-office applications, admin/user panels, and dashboards.
GitHubOrchid is a @laravel package that allows for rapid application development of back-office applications, admin/user panels, and dashboards.>= 9.0.0, < 9.4.4NVD