HIGH8.0

GHSA-589w-hccm-265x

Inline attribute values were not processed.

Quick fix

GHSA-589w-hccm-265x — orchid/platform: upgrade to the fixed version with the command below.

composer require orchid/platform:^9.4.4

Details

### Impact Inline attributes have not been processed escape. If the data that came from users was not processed, then an XSS vulnerability is possible

### Patches Fixed in 9.4.4

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/orchid/platform

Introduced in: 9.0.0Fixed in: 9.4.4

Fixcomposer require orchid/platform:^9.4.4

References

https://github.com/orchidsoftware/platform/security/advisories/GHSA-589w-hccm-265x[WEB]
https://nvd.nist.gov/vuln/detail/CVE-2020-15263[ADVISORY]
https://github.com/orchidsoftware/platform/commit/03f9a113b1a70bc5075ce86a918707f0e7d82169[WEB]