TI-2022-01886 CVE-2022-2035 · GHSA-hhxf-mm6p-f8cqCross-site scripting in Rustici Software SCORM EnginePriority LOW 29A reflected cross-site scripting (XSS) vulnerability exists in the playerConfUrl parameter in the /defaultui/player/modern.html file for SCORM Engine versions < 20.1.45.914, 21.1.x < 21.1.7.219.CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00754 · Published 2022-06-09 · No fix listed CWE-79