Skip to content
OpenAdvisories
Unscored CVE-2020-36499 EUVD-2020-23985GHSA-j8cf-x3wp-585x

TAO Open Source Assessment Platform v3.3.0 RC02 was discovered to contain a cross-site scripting (XSS) vulnerability in the content paramet…

Published Oct 22, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

TAO Open Source Assessment Platform v3.3.0 RC02 was discovered to contain a cross-site scripting (XSS) vulnerability in the content parameter of the Rubric Block (Add) module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the rubric name value.

References