CVE-2020-23050

TAO Open Source Assessment Platform v3.3.0 RC02 contains a HTML injection vulnerability in the userFirstName field of the user account input. The issue enables phishing, external redirects, and arbitrary code execution. Root cause is HTML injection in the userFirstName parameter. Related advisori...

CVE-2020-36499

TAO Open Source Assessment Platform v3.3.0 RC02 contains a cross-site scripting (XSS) vulnerability in the content parameter of the Rubric Block (Add) module. A crafted payload in the rubric name value allows execution of arbitrary web scripts/HTML. Affected product: TAO Open Source Assessment Pl...