| Package | Affected versions | Patched versions |
|---|---|---|
| claroline | ≤ 13.5.7 |
Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS). An attacker can obtain javascript code execution by adding arbitrary javascript code in the 'Location' field of a calendar event.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free