CVE-2024-11328 CLUEVO LMS, E-Learning Platform <= 1.13.2 - Reflected Cross-Site Scripting

The CLUEVO LMS, E-Learning Platform plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 1.13.2. This makes it possible for unauthenticated attackers to...

CVE-2024-11328

CVE-2024-11328 affects the CLUEVO LMS, a WordPress plugin, in versions up to and including 1.13.2. The issue is Reflected Cross-Site Scripting caused by using add_query_arg and remove_query_arg without proper escaping on the URL. Information from Red Hat and Wordfence confirms the vulnerability, ...

WordPress CLUEVO LMS, E-Learning Platform plugin <= 1.13.2 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin CLUEVO LMS, E-Learning Platform versions = 1.13.2...

PT-2025-1638 · WordPress · Cluevo Lms

Name of the Vulnerable Software and Affected Versions: CLUEVO LMS, E-Learning Platform plugin for WordPress versions up to, and including, 1.13.2 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg and remove query arg without appropriate escaping o...

CVE-2024-11328: Improper Neutralization of Input During Web Page Generation

The CLUEVO LMS, E-Learning Platform plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 1.13.2. This makes it possible for unauthenticated attackers to...

WordPress plugin CLUEVO LMS, E-Learning Platform 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blogs on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin CLUEVO LMS, E-Learning Platform...

CVE-2024-8002

A vulnerability has been found in VIWIS LMS 9.11 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component File Upload. The manipulation of the argument filename leads to cross site scripting. The attack can be launched remotely. Upgrading to versi...

CVE-2024-8002 VIWIS LMS File Upload cross site scripting

A vulnerability has been found in VIWIS LMS 9.11 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component File Upload. The manipulation of the argument filename leads to cross site scripting. The attack can be launched remotely. Upgrading to versi...

CVE-2024-8002

CVE-2024-8002 affects VIWIS LMS 9.11, specifically the File Upload component. The vulnerability arises from input handling of the filename argument, enabling cross-site scripting (XSS) via a remote attack. Remediation is to upgrade to VIWIS LMS 9.12, which addresses this issue. The available sour...

CVE-2024-8002 VIWIS LMS File Upload cross site scripting

A vulnerability has been found in VIWIS LMS 9.11 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component File Upload. The manipulation of the argument filename leads to cross site scripting. The attack can be launched remotely. Upgrading to versi...

PT-2025-3696 · Viwis Lms · Viwis Lms

Name of the Vulnerable Software and Affected Versions: VIWIS LMS version 9.11 Description: A vulnerability has been found in the File Upload component of VIWIS LMS, affecting an unknown functionality. The manipulation of the filename argument leads to cross-site scripting. The attack can be...

CVE-2024-54818: Improper Preservation of Permissions

SourceCodester Computer Laboratory Management System 1.0 is vulnerable to Incorrect Access Control. via /php-lms/admin/?page=user/list...

CVE-2024-8002: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in VIWIS LMS 9.11 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component File Upload. The manipulation of the argument filename leads to cross site scripting. The attack can be launched remotely. Upgrading to versi...

PT-2025-3074

Name of the Vulnerable Software and Affected Versions SourceCodester Computer Laboratory Management System version 1.0 Description The issue concerns an incorrect access control mechanism. It can be exploited via the "/php-lms/admin/?page=user/list" API endpoint. There is no information provided...

CVE-2025-22334

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FilaThemes Education LMS allows Stored XSS.This issue affects Education LMS: from n/a through 0.0.7...

CVE-2025-22334 WordPress Education LMS theme <= 0.0.7 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FilaThemes Education LMS allows Stored XSS.This issue affects Education LMS: from n/a through 0.0.7...

CVE-2025-22334

CVE-2025-22334 describes an stored XSS in the WordPress plugin/theme setup “Education LMS” by FilaThemes. The vulnerability is classified as an improper neutralization of input during web page generation (XSS). Public details indicate the affected scope as Education LMS versions from n/a up to 0....

CVE-2025-22334 WordPress Education LMS theme <= 0.0.7 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FilaThemes Education LMS allows Stored XSS.This issue affects Education LMS: from n/a through 0.0.7...

WordPress plugin Education LMS 跨站脚本漏洞

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Education LMS version 0.0.7 and previous versions exist cross-site scripting...

PT-2025-4449

Name of the Vulnerable Software and Affected Versions FilaThemes Education LMS versions 0.0.0 through 0.0.7 Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject...