Lucene search
GoogleOSV:CVE-2020-15263HistoryOct 19, 2020 - 9:15 p.m.
CVE-2020-15263
2020-10-1921:15:12
Google
osv.dev
5
platform
version 9.4.4
xss vulnerability
EPSS
0.001
Percentile
29.3%
In platform before version 9.4.4, inline attributes are not properly escaped. If the data that came from users was not escaped, then an XSS vulnerability is possible. The issue was introduced in 9.0.0 and fixed in 9.4.4.
Related
osv
osv
Inline attribute values were not processed.
2020-10-19 20:17:47
cvelist
cvelist
CVE-2020-15263 XSS in platform
2020-10-19 20:35:17
prion
prion
Design/Logic Flaw
2020-10-19 21:15:00
veracode
veracode
Cross-Site Scripting (XSS)
2020-10-20 04:15:17
cve
cve
CVE-2020-15263
2020-10-19 21:15:12
github
github
Inline attribute values were not processed.
2020-10-19 20:17:47
nvd
nvd
CVE-2020-15263
2020-10-19 21:15:12