CVE-2022-37162

PoC —

CVSS 3.1

5.4 medium

EPSS

<1%p53

Published

Aug 25, 2022 (Aug 25, 2022)

Modified

Jun 17, 2026

Description

Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS). An attacker can obtain javascript code execution by adding arbitrary javascript code in the 'Location' field of a calendar event.

Vendors: claroline
Products: claroline
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.