CVE:CVE-2015-10049
CNNVD:CNNVD-202301-1164
course-builder是Overdrive Eletrônica开源的一个应用程序。
Overdrive Eletrônica course-builder 1.8.0之前版本存在跨站脚本漏洞，该漏洞源于文件 coursebuilder/modules/oeditor/oeditor.html 的一些未知功能，操纵导致跨站点脚本。
solution:Upgrade course-builder_project course-builder to a higher version than 1.8.0,and avoid the version (,1.8.0)