Security Advisory

CVE-2020-13145

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-05-18 18:24:25

Last updated 2024-08-04 12:11:19

Assigner mitre

State PUBLISHED

Description

Studio in Open edX Ironwood 2.5 allows users to upload SVG files via the "Content>File Uploads" screen. These files can contain JavaScript code and thus lead to Stored XSS.

← Browse all CVEs View on cve.org ↗