Description
The Backpack\CRUD Backpack component before 3.4.9 for Laravel allows XSS via the select field type.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | backpack/crud | < 3.4.9 | 3.4.9 | GHSA-6gfm-gpr3-8wh9 |
Medium · 6.1
CVE-2018-20962
EUVD-2022-2792GHSA-6gfm-gpr3-8wh9
Backpack\CRUD for Laravel XSS Vulnerability
Published Aug 8, 2019 · Updated Aug 5, 2024 · Assigned by mitre