Lucene search
GoogleOSV:GHSA-3J5X-7CCF-PPGMHistoryAug 21, 2019 - 4:15 p.m.
Cross-site scripting in recommender-xblock
2019-08-2116:15:33
Google
osv.dev
4
0.001 Low
EPSS
Percentile
36.1%
Recommender before 1.3.1 allows XSS. It is possible for a learner to craft a fake resource to recommender, that includes script which could possibly steal credentials from staff if they are lured into viewing the recommended resource.
Related
osv
osv
PYSEC-2019-219
2019-08-09 16:15:00
CVE-2018-20858
2019-08-09 16:15:10
prion
prion
Cross site scripting
2019-08-09 16:15:00
cve
cve
CVE-2018-20858
2019-08-09 16:15:10
nvd
nvd
CVE-2018-20858
2019-08-09 16:15:10
github
github
Cross-site scripting in recommender-xblock
2019-08-21 16:15:33
cvelist
cvelist
CVE-2018-20858
2019-08-09 15:34:25