medium6.1
CVE-2021-39248
Open edX through Lilac.1 allows XSS in common/static/common/js/discussion/utils.js via crafted LaTeX content within a discussion.
Impact
Open edX through Lilac.1 allows XSS in common/static/common/js/discussion/utils.js via crafted LaTeX content within a discussion.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Edx | Edx-Platform | All versions |