[MEDIUM] Laravel Backpack CRUD: Stored XSS in the color column — the `@if($column['escaped'])` branches are inverted

PKSA-5phc-pmxf-y81y CVE-2026-54181 GHSA-mmg4-322v-6jvc

Affected package: backpack/crud

Affected version: >=7.0.0,<7.0.38|>=6.0.0,<6.8.14

Reported by:
GitHub