CVE:CVE-2019-12834
CNNVD:CNNVD-201907-805
HT2 Labs Learning Locker是一个开源学习记录存储库。
HT2 Labs Learning Locker 3.15.1版本中存在安全漏洞。攻击者可利用该漏洞向网站的DOM中注入恶意的HTML及JavaScript代码。
solution:Upgrade ht2labs learning_locker to a higher version than 3.15.1,and avoid the version 3.15.1