Description
Studio in Open edX Ironwood 2.5 allows users to upload SVG files via the "Content>File Uploads" screen. These files can contain JavaScript code and thus lead to Stored XSS.
Unscored
CVE-2020-13145
EUVD-2020-5421GHSA-hr85-6hw5-vqgh
Studio in Open edX Ironwood 2.5 allows users to upload SVG files via the "Content>File Uploads" screen. These files can contain JavaScript …
Published May 18, 2020 · Updated Aug 4, 2024 · Assigned by mitre