Description
Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS). An attacker can obtain javascript code execution by adding arbitrary javascript code in the 'Location' field of a calendar event.
Unscored
CVE-2022-37162
EUVD-2022-39815GHSA-wmhh-453x-wvw9
Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS). An attacker can obtain javascript code execution by adding arbitrar…
Published Aug 25, 2022 · Updated Aug 3, 2024 · Assigned by mitre