CVE-2020-15263highCWE-79

CVE-2020-15263: high-severity vulnerability in orchidsoftware platform

XSS in platform

Published · Updated

Follow this CVE+ Monitor platform+ Monitor orchid/platform

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8epss 0.7%
In platform before version 9.4.4, inline attributes are not properly escaped. If the data that came from users was not escaped, then an XSS vulnerability is possible. The issue was introduced in 9.0.0 and fixed in 9.4.4.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
Affected products
orchidsoftware · platform
Related CVEs — orchidsoftware platform

In the same product, most dangerous first.

CVE-2023-36825CRITICALOrchid Deserialization of Untrusted Data vulnerability leads to Remote Code ExecutionEPSS 1.1%CVE-2024-51992MEDIUMMethod Exposure Vulnerability in Modals in orchid/platformEPSS 0.3%