https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T10:26:38.618292+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-63957 cnvd-2020-63957 2026-10-08T10:26:38.621387+00:00 cnvd-2020-63957 https://cve.radiocsirt.org/vuln/euvd-2026-42832 EUVD-2026-42832 2026-10-08T10:26:38.621421+00:00 EUVD-2026-42832 https://cve.radiocsirt.org/vuln/fkie_cve-2020-15263 fkie_cve-2020-15263 2026-10-08T10:26:38.621436+00:00

In platform before version 9.4.4, inline attributes are not properly escaped. If the data that came from users was not escaped, then an XSS vulnerability is possible. The issue was introduced in 9.0.0 and fixed in 9.4.4.

 https://cve.radiocsirt.org/vuln/ghsa-589w-hccm-265x GHSA-589w-hccm-265x — Inline attribute values were not processed. 2026-10-08T10:26:38.621464+00:00

Affected: Packagist: orchid/platform

### Impact Inline attributes have not been processed escape. If the data that came from users was not processed, then an XSS vulnerability is possible

### Patches Fixed in 9.4.4

 https://cve.radiocsirt.org/vuln/gsd-2020-15263 gsd-2020-15263 2026-10-08T10:26:38.621487+00:00 gsd-2020-15263