CVE-2021-39248

MEDIUM CVSS: 6.1 Published: 2021-08-17 Modified: 2026-06-17

Description

Open edX through Lilac.1 allows XSS in common/static/common/js/discussion/utils.js via crafted LaTeX content within a discussion.

Affected Platforms

Edx Edx-Platform

Weakness Type

CWE-79

References