Description Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS) via SVG file upload. Remediation References CVE-2022-37161 Related Vulnerabilities WordPress Plugin Lingotek Translation Multiple Cross-Site Scripting Vulnerabilities (1.1.8) PHP-Fusion Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-12461) WordPress Plugin AdVert Cross-Site Scripting (1.0.5) WordPress Plugin Tweet Blender Cross-Site Scripting (4.0.1) WordPress Plugin WP eCommerce 'wpsc-transaction_results_functions.php' SQL Injection (3.8.7.5) Severity Medium Classification CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities CWE-707 CVE-2022-37161