Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Openedx Subscribe
Filtered by product Xblock-drag-and-drop-v2
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-46147 1 Openedx 1 Xblock-drag-and-drop-v2 2022-12-01 N/A 6.1 MEDIUM
Drag and Drop XBlock v2 implements a drag-and-drop style problem, where a learner has to drag items to zones on a target image. Versions prior to 3.0.0 are vulnerable to cross-site scripting in multiple XBlock Fields. Any platform that has deployed the XBlock may be impacted. Version 3.0.0 contains a patch for this issue. There are no known workarounds.