CVE-2022-37162

Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS)

published August 25, 2022

CVSS
—
EPSS
1%
Percentile
55.1
In the wild
Unconfirmed
What it is

Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS). An attacker can obtain javascript code execution by adding arbitrary javascript code in the 'Location' field of a calendar event.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00768 · 55.1th percentile
Published
2022-08-25T16:19Z
EPSS history
Timeline
  • 25 AUG 16:19Z
    Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS)
    cvelistv5