← All advisories

Medium severity6.1NVD Advisory· Published Aug 17, 2021· Updated Jun 17, 2026

CVE-2021-39248

CVE-2021-39248

Description

Open edX through Lilac.1 allows XSS in common/static/common/js/discussion/utils.js via crafted LaTeX content within a discussion.

Affected products

3

Edx/Edx Platform
cpe:2.3:a:edx:edx-platform:-:*:*:*:*:*:*:*
Open edX/Open edXdescription
Open.edx/Platformllm-fuzzy
Range: <=Lilac.1

Patches

Vulnerability mechanics

References

1

github.com/edx/edx-platform/pull/28379nvdPatchThird Party Advisory

News mentions

0

No linked articles in our index yet.