Cross site scripting

2020-05-1819:15:00

PRIOn knowledge base

www.prio-n.com

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

JSON

Studio in Open edX Ironwood 2.5 allows users to upload SVG files via the “Content>File Uploads” screen. These files can contain JavaScript code and thus lead to Stored XSS.

CPENameOperatorVersion
open_edx_platformeq2.5

CPE	Name	Operator	Version
	open_edx_platform	eq	2.5

References

stark0de.com/2020/05/17/openedx-vulnerabilities.html