23 matches found
PYSEC-2019-219
Recommender before 2018-07-18 allows XSS...
6.1CVSS2.8AI score0.01083EPSS
SaveExploits0References3
CVE-2018-20858
Recommender before 2018-07-18 allows XSS...
6.3AI score0.01083EPSS
SaveExploits0References2
CVE-2018-20858
CVE-2018-20858 affects the Recommender XBlock (edX Recommender) with a cross-site scripting vulnerability in versions prior to 2018-07-18. The issue stems from improper validation of client-side data, enabling XSS when a user views a crafted resource. Public advisories (GHSA) indicate this could ...
6.1CVSS6.2AI score0.01083EPSS
SaveExploits0References2Affected Software1
20