CVE-2022-37162: Claroline

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS). An attacker can obtain javascript code execution by adding arbitrary javascript code in the 'Location' field of a calendar event.

Affected products

• Claroline Claroline: up to and including 13.5.7

Published 2022-08-25. Last modified 2026-06-17.