medium6.1
CVE-2018-20962
The Backpack\CRUD Backpack component before 3.4.9 for Laravel allows XSS via the select field type.
Impact
The Backpack\CRUD Backpack component before 3.4.9 for Laravel allows XSS via the select field type.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Backpackforlaravel | Backpack\\Crud | before 3.4.9 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/Laravel-Backpack/CRUD/blob/master/CHANGELOG.md
- https://github.com/Laravel-Backpack/CRUD/commit/8b6bd0a2d489a4690f6b1d7ace67e2f07f5f0cc6
- https://github.com/Laravel-Backpack/CRUD/compare/3.4.8...3.4.9
- https://github.com/Laravel-Backpack/CRUD/issues/1297
- https://github.com/Laravel-Backpack/CRUD/blob/master/CHANGELOG.md
- https://github.com/Laravel-Backpack/CRUD/commit/8b6bd0a2d489a4690f6b1d7ace67e2f07f5f0cc6
- https://github.com/Laravel-Backpack/CRUD/compare/3.4.8...3.4.9
- https://github.com/Laravel-Backpack/CRUD/issues/1297