PT-2022-14575

Name of the Vulnerable Software and Affected Versions SCORM Engine versions prior to 20.1.45.914 SCORM Engine versions 21.1.x prior to 21.1.7.219 Description A reflected cross-site scripting XSS issue exists due to the lack of limitations on the domain or format of the url supplied by the user in...

CVE-2022-2035: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability exists in the playerConfUrl parameter in the /defaultui/player/modern.html file for SCORM Engine versions 20.1.45.914, 21.1.x 21.1.7.219. The issue exists because there are no limitations on the domain or format of the url supplied by the user,...