medium5.4
CVE-2021-46372
Scoold 1.47.2 is a Q&A/knowledge base platform written in Java.
Impact
Scoold 1.47.2 is a Q&A/knowledge base platform written in Java. When writing a Q&A, the markdown editor is vulnerable to a XSS attack when using uppercase letters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Erudika | Scoold | Version 1.47.2 |