CVE-2018-20859

edx-platform before 2018-07-18 allows XSS via a response to a Chemical Equation advanced problem...

CVE-2018-20859

CVE-2018-20859 affects the Open edX platform (edx-platform). It describes an XSS vulnerability: edx-platform before 2018-07-18 allows executing client-side code via a response to a Chemical Equation advanced problem. The root cause is lack of proper validation of client data in the web applicatio...

CVE-2018-20859: Improper Neutralization of Input During Web Page Generation

edx-platform before 2018-07-18 allows XSS via a response to a Chemical Equation advanced problem...

PT-2019-10286

Name of the Vulnerable Software and Affected Versions: edx-platform versions prior to 2018-07-18 Description: The issue allows for XSS via a response to a Chemical Equation advanced problem. Recommendations: For versions prior to 2018-07-18, update to a version released after 2018-07-18 to resolv...