4 matches found
CVE-2018-20858
Recommender before 2018-07-18 allows XSS...
6.1CVSS6.9AI score0.00855EPSS
SaveExploits0References1
CVE-2018-20858
Recommender before 2018-07-18 allows XSS...
6.1CVSS6.3AI score
SaveExploits0References2
CVE-2018-20858
Recommender before 2018-07-18 allows XSS...
6.3AI score0.00855EPSS
SaveExploits0References2
CVE-2018-20858
CVE-2018-20858 affects the Recommender XBlock (edX Recommender) with a cross-site scripting vulnerability in versions prior to 2018-07-18. The issue stems from improper validation of client-side data, enabling XSS when a user views a crafted resource. Public advisories (GHSA) indicate this could ...
6.1CVSS6.2AI score0.00855EPSS
SaveExploits0References2Affected Software1
20