CVE-2020-15263

Published: 2020-10-19T21:15Z

Last Modified: 2024-11-21T05:05Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

In platform before version 9.4.4, inline attributes are not properly escaped. If the data that came from users was not escaped, then an XSS vulnerability is possible. The issue was introduced in 9.0.0 and fixed in 9.4.4. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt