Security Advisory
CVE-2020-13145
5.4
MEDIUM
Vulnerability Description
Studio in Open edX Ironwood 2.5 allows users to upload SVG files via the "Content>File Uploads" screen. These files can contain JavaScript code and thus lead to Stored XSS.
Published Date
May 18, 2020
Official Source
NIST NVD Advisory