NetSight
medium6.1

CVE-2021-39248

Open edX through Lilac.1 allows XSS in common/static/common/js/discussion/utils.js via crafted LaTeX content within a discussion.

Impact

Open edX through Lilac.1 allows XSS in common/static/common/js/discussion/utils.js via crafted LaTeX content within a discussion.

Affected products

VendorProductAffected versions
EdxEdx-Platform
All versions

Weakness classification

References