CVE-2024-47186 Filament has unvalidated ColorColumn and ColorEntry values that can be used for Cross-site Scripting

Filament is a collection of full-stack components for Laravel development. Versions of Filament from v3.0.0 through v3.2.114 are affected by a cross-site scripting XSS vulnerability. If values passed to a ColorColumn or ColumnEntry are not valid and contain a specific set of characters,...

CVE-2024-47186: Improper Neutralization of Input During Web Page Generation

Filament is a collection of full-stack components for Laravel development. Versions of Filament from v3.0.0 through v3.2.114 are affected by a cross-site scripting XSS vulnerability. If values passed to a ColorColumn or ColumnEntry are not valid and contain a specific set of characters,...