← back
CVE-2018-20962

CVE-2018-20962

EPSS 1.3%
The Backpack\CRUD Backpack component before 3.4.9 for Laravel allows XSS via the select field type.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/Laravel-Backpack/CRUD/blob/master/CHANGELOG.mdhttps://github.com/Laravel-Backpack/CRUD/commit/8b6bd0a2d489a4690f6b1d7ace67e2f07f5f0cc6https://github.com/Laravel-Backpack/CRUD/compare/3.4.8...3.4.9https://github.com/Laravel-Backpack/CRUD/issues/1297