Description Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS) via SVG file upload. Remediation References CVE-2022-37161 Related Vulnerabilities WordPress Plugin Woody ad snippets-Insert Header Footer Code, AdSense Ads PHP Code Injection (1.3) PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2019-9639) WordPress Plugin Acunetix Secure WordPress Cross-Site Scripting (3.0.3) Grafana Other Vulnerability (CVE-2021-28147) Oracle Database Server CVE-2014-6453 Vulnerability (CVE-2014-6453) Severity Medium Classification CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities CWE-707 CVE-2022-37161