CVE-2022-46147 Drag and Drop XBlock v2 has XSS Issues in Xblock Input Fields

Drag and Drop XBlock v2 implements a drag-and-drop style problem, where a learner has to drag items to zones on a target image. Versions prior to 3.0.0 are vulnerable to cross-site scripting in multiple XBlock Fields. Any platform that has deployed the XBlock may be impacted. Version 3.0.0 contai...

CVE-2022-46147 Drag and Drop XBlock v2 has XSS Issues in Xblock Input Fields

Drag and Drop XBlock v2 implements a drag-and-drop style problem, where a learner has to drag items to zones on a target image. Versions prior to 3.0.0 are vulnerable to cross-site scripting in multiple XBlock Fields. Any platform that has deployed the XBlock may be impacted. Version 3.0.0 contai...

CVE-2022-46147

CVE-2022-46147 concerns the Drag and Drop XBlock v2 used with Open edX. The vulnerability is an XSS issue in multiple XBlock Fields that affects versions prior to 3.0.0. The 3.0.0 release contains a patch to address the issue. There are no explicit exploit details or known workarounds reported in...