XSS in Laravel-backpack Crud
CVE-2022-31114
backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels. Versions prior to 5.0.13, 4.1.69, and 4.0.63 are vulnerable to cross-s…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.000 (15.0th percentile) — read the EPSS interpretation.
Affected products
- Laravel-backpack Crud — versions >= 5.0.0, < 5.0.13, >= 4.0.0, < 4.1.69, < 4.0.63
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)