Security Advisory

CVE-2020-15263

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-10-19 20:35:17
Last updated 2024-08-04 13:15:20
Assigner GitHub_M
State PUBLISHED

Description

In platform before version 9.4.4, inline attributes are not properly escaped. If the data that came from users was not escaped, then an XSS vulnerability is possible. The issue was introduced in 9.0.0 and fixed in 9.4.4.