Description

A stored cross-site scripting (XSS) vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the course "Title" and "Content" fields.

Remediation

References

CVE-2021-35415

Related Vulnerabilities

MediaWiki Improper Authentication Vulnerability (CVE-2014-2665)

WordPress Plugin Shopping Cart Multiple SQL Injection and Arbitrary File Upload Vulnerabilities (8.1.14)

Magento Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-7861)

WordPress Plugin Jigoshop Multiple Unspecified Vulnerabilities (1.17.13)

WordPress Plugin WooCommerce Security Bypass (6.3.0)

Severity

Medium

Classification

CVE-2021-35415 CWE-707

Tags

Missing Update Known Vulnerabilities