Search

CVE-2026-85271 - Open edX Platform: Stored CSS Injection in Email Digest Notifications via Unsanitized Thread Title (incomplete patch of CVE-2026-42857)

CVE ID : CVE-2026-85271 Published : Sept. 18, 2026, 8:38 p. m. • 17 minutes ago Description : Open edX Platform enables the authoring and delivery of online learning at any scale. From Redwood until Ulmo and Verawood. 1, the add_additional_attributes_to_notifications function in openedx/core/djangoapps/notifications/email/utils. py assigns notification content without sanitizing discussion-title values produced by get_notification_content in openedx/core/djangoapps/notifications/base_notification. py. An enrolled student can place CSS-capable markup in the post_title value supplied by lms/djangoapps/discussion/rest_api/discussions_notifications. py. Digest and batched-email rendering then passes that value through openedx/core/djangoapps/notifications/templates/notifications/digest_content.