CVE-2022-37161

Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS) via SVG file upload

published August 25, 2022

CVSS
—
EPSS
1%
Percentile
50.6
In the wild
Unconfirmed
What it is

Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS) via SVG file upload.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00651 · 50.6th percentile
Published
2022-08-25T16:21Z
EPSS history
Timeline
  • 25 AUG 16:21Z
    Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS) via SVG file upload
    cvelistv5