Claroline 13.5.7 and prior is... CVE-2022-37162

- AV AC AU C I A
发布: 2022-08-25
修订: 2024-11-21

Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS). An attacker can obtain javascript code execution by adding arbitrary javascript code in the 'Location' field of a calendar event.

0%
暂无可用Exp或PoC
当前有1条受影响产品信息