Lucene search

K
osvGoogleOSV:GHSA-RC5R-697F-28X6
HistoryApr 15, 2020 - 9:07 p.m.

XSS injection in the Grid component of Sylius

2020-04-1521:07:59
Google
osv.dev
2

0.001 Low

EPSS

Percentile

22.7%

Grid component of Sylius omits HTML input sanitisation while rendering object implementing __toString() method through the string field type.

0.001 Low

EPSS

Percentile

22.7%