Description
Recommender before 2018-07-18 allows XSS.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | recommender-xblock | < 1.3.1 | 1.3.1 | GHSA-3j5x-7ccf-ppgm |
Medium · 6.1
CVE-2018-20858
EUVD-2019-0120GHSA-3j5x-7ccf-ppgmPYSEC-2019-219
Cross-site scripting in recommender-xblock
Published Aug 9, 2019 · Updated Aug 5, 2024 · Assigned by mitre