PT-2022-20930

Name of the Vulnerable Software and Affected Versions IdeaLMS version 2022 Description The issue allows reflected Cross Site Scripting XSS via the IdeaLMS/Class/Assessment/ PATH INFO. This means an attacker can inject malicious scripts into the website, potentially stealing user data or taking...

CVE-2022-31786: Improper Neutralization of Input During Web Page Generation

IdeaLMS 2022 allows reflected Cross Site Scripting XSS via the IdeaLMS/Class/Assessment/ PATHINFO...