PT-2019-7204

CVE-2015-6960

Published

2019-07-29

Updated

2020-01-07

CVSS 2.0

4.3

Medium

MetricsAV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions edx-platform versions prior to 2015-09-17

Description The issue allows for XSS via a team name.

Recommendations For versions prior to 2015-09-17, update to a version released after 2015-09-17 to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾