Unrated
edx-platform before 2018-07-18 allows XSS via a response to a Chemical Equation advanced problem.
CVE-2018-20859
First seen on SecPulse
References
- patch github.com
- patch patch-diff.githubusercontent.com
- web groups.google.com