Vulnerabilities > EDX > Open EDX Platform > Low

DATE	CVE	VULNERABILITY TITLE	RISK
2020-05-18	CVE-2020-13145	Cross-site Scripting vulnerability in EDX Open EDX Platform 2.5 Studio in Open edX Ironwood 2.5 allows users to upload SVG files via the "Content>File Uploads" screen. network edx CWE-79	3.5

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.