Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2022-06-09	CVE-2022-32195	Cross-site Scripting vulnerability in EDX Open EDX 20150127/20190315 Open edX platform before 2022-06-06 allows XSS via the "next" parameter in the logout URL. network low complexity edx CWE-79	6.1
2021-08-17	CVE-2021-39248	Cross-site Scripting vulnerability in EDX Edx-Platform Open edX through Lilac.1 allows XSS in common/static/common/js/discussion/utils.js via crafted LaTeX content within a discussion. network low complexity edx CWE-79	6.1
2020-05-18	CVE-2020-13145	Cross-site Scripting vulnerability in EDX Open EDX Platform 2.5 Studio in Open edX Ironwood 2.5 allows users to upload SVG files via the "Content>File Uploads" screen. network low complexity edx CWE-79	5.4
2020-03-19	CVE-2019-20513	Cross-site Scripting vulnerability in EDX Open EDX 20190315 Open edX Ironwood.1 allows support/certificates?user= reflected XSS. network low complexity edx CWE-79	6.1
2019-08-09	CVE-2018-20858	Cross-site Scripting vulnerability in EDX Recommender Recommender before 2018-07-18 allows XSS. network low complexity edx CWE-79	6.1
2019-07-30	CVE-2018-20859	Cross-site Scripting vulnerability in EDX Edx-Platform edx-platform before 2018-07-18 allows XSS via a response to a Chemical Equation advanced problem. network low complexity edx CWE-79	6.1
2019-07-29	CVE-2016-10765	Improper Input Validation vulnerability in EDX Edx-Platform edx-platform before 2016-06-10 allows account activation with a spoofed e-mail address. network low complexity edx CWE-20	5.3
2019-07-29	CVE-2015-6960	Cross-site Scripting vulnerability in EDX Edx-Platform edx-platform before 2015-09-17 allows XSS via a team name. network low complexity edx CWE-79	6.1
2019-07-29	CVE-2015-6253	Cross-site Scripting vulnerability in EDX Edx-Platform edx-platform before 2015-08-17 allows XSS in the Studio listing of courses. network low complexity edx CWE-79	5.4
2017-03-13	CVE-2015-6671	Information Exposure vulnerability in EDX Edx-Platform Open edX edx-platform before 2015-08-25 requires use of the database for storage of SAML SSO secrets, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging access to a database backup. network high complexity edx CWE-200	5.9