Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/09/14 5:55 p.m.22 views

CVE-2026-54181 backpack/crud: Stored XSS in the color column — the `@if($column['escaped'])` branches are inverted

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.38, src/resources/views/crud/columns/color.blade.php inverts the escaped and raw rendering branche...

5.4CVSS
SaveExploits0References7
Rows per page
Query Builder