CVEs affecting projects tracked on Release Alert, from NVD & OSV.
edx-platform before 2018-07-18 allows XSS via a response to a Chemical Equation advanced problem.