Skip to content
OpenAdvisories

Vendor

Frentix

2 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • Medium 5.4

    Stored Cross-Site Scripting (XSS) within the Media Center

    The Frentix GmbH OpenOlat LMS is affected by stored a Cross-Site Scripting (XSS) vulnerability. It is possible to upload files within the Media Center of OpenOlat version 18.1.5 (or lower) as an authenticated user without any other rights. Although the filety…

  • Medium 5.4

    Multiple Stored Cross-Site Scripting Vulnerabilities

    The Frentix GmbH OpenOlat LMS is affected by multiple stored Cross-Site Scripting (XSS) vulnerabilities. An attacker with rights to create or edit groups can create a course with a name that contains an XSS payload. Furthermore, attackers with the permissions…