CVE-2021-46372: Erudika Scoold

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Scoold 1.47.2 is a Q&A/knowledge base platform written in Java. When writing a Q&A, the markdown editor is vulnerable to a XSS attack when using uppercase letters.

Affected products

• Erudika Scoold: version 1.47.2 only

Published 2022-02-18. Last modified 2026-06-17.