Vulnerabilities > EDX > Open EDX > 2019.03.15

DATE CVE VULNERABILITY TITLE RISK
2022-06-09 CVE-2022-32195 Cross-site Scripting vulnerability in EDX Open EDX 20150127/20190315
Open edX platform before 2022-06-06 allows XSS via the "next" parameter in the logout URL.
network
low complexity
edx CWE-79
6.1
6.1
2020-03-19 CVE-2019-20513 Cross-site Scripting vulnerability in EDX Open EDX 20190315
Open edX Ironwood.1 allows support/certificates?user= reflected XSS.
network
low complexity
edx CWE-79
6.1
6.1