{"id":"CVE-2019-15487","details":"DfE School Experience before v16333-GA has XSS via a teacher training URL.","modified":"2026-04-11T21:07:39.097448Z","published":"2019-08-23T13:15:11.327Z","references":[{"type":"FIX","url":"https://github.com/DFE-Digital/schools-experience/pull/769"},{"type":"FIX","url":"https://github.com/DFE-Digital/schools-experience/releases/tag/v16333-GA"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/dfe-digital/schools-experience","events":[{"introduced":"0"},{"fixed":"c6ec0dabad034694dfb47731dbf2825259e2a2d0"}],"database_specific":{"source":["CPE_FIELD","REFERENCES"],"extracted_events":[{"introduced":"0"},{"fixed":"16333-ga"}],"cpe":"cpe:2.3:a:schoolexperience:department_for_education_school_experience:*:*:*:*:*:*:*:*"}}],"versions":["v11543-stable","v11579-stable","v11729-stable","v11942-stable","v11992-stable","v12096-stable","v12133-stable","v12155-stable","v12243-stable","v12472-stable","v12545-stable","v12951-stable","v12994-GA","v12994-stable","v13023-stable","v13469-stable","v13635-GA","v13635-stable","v14015-stable","v14154-stable","v14271-stable","v14489-stable","v14592-stable","v14599-GA","v14599-stable","v15607-stable","v3243-stable","v3452-stable","v3473-stable","v3490-stable","v3505-stable","v3533-stable","v3562-stable","v3827-stable","v3931-stable","v3994-stable","v4277-stable","v5111-stable","v7745-stable","v8499-stable","v9093-stable"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-15487.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}