5311 matches found
CVE-2025-22334: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FilaThemes Education LMS allows Stored XSS.This issue affects Education LMS: from n/a through 0.0.7...
WordPress Sikshya LMS Plugin <= 0.0.21 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Sikshya LMS versions = 0.0.21...
WordPress Education LMS theme <= 0.0.7 - Stored Cross Site Scripting (XSS) vulnerability
Stored Cross Site Scripting XSS vulnerability discovered by Michael Patchstack Alliance in WordPress Theme Education LMS versions = 0.0.7...
CVE-2024-37093
Cross-Site Request Forgery CSRF vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Cross Site Request Forgery.This issue affects MasterStudy LMS: from n/a through = 3.2.1...
CVE-2024-37093
Cross-Site Request Forgery CSRF vulnerability in StylemixThemes MasterStudy LMS allows Cross Site Request Forgery.This issue affects MasterStudy LMS: from n/a through 3.2.1...
CVE-2024-37093 WordPress MasterStudy LMS plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Cross Site Request Forgery.This issue affects MasterStudy LMS: from n/a through = 3.2.1...
CVE-2024-37093 WordPress MasterStudy LMS plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Cross Site Request Forgery.This issue affects MasterStudy LMS: from n/a through = 3.2.1...
CVE-2024-37093
CVE-2024-37093 describes a CSRF vulnerability in the WordPress plugin MasterStudy LMS by StylemixThemes, affecting versions n/a to 3.2.1. NVD lists CVSS v3.1 base score 8.8 (HIGH) with impact to confidentiality, integrity, and availability. The connected documents confirm the existence and scope ...
Security update for liboqs, oqs-provider
This update for liboqs, oqs-provider fixes the following issues: This update supplies the new FIPS standardized ML-KEM, ML-DSA, SHL-DSA algorithms. This update liboqs to 0.12.0: This release updates the ML-DSA implementation to the final FIPS 204 version. This release still includes the NIST Roun...
WordPress plugin MasterStudy LMS 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
PT-2025-2457 · Unknown · Masterstudy Lms
Name of the Vulnerable Software and Affected Versions: MasterStudy LMS versions prior to 3.2.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attack where an attacker tricks...
CVE-2024-37093: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Cross Site Request Forgery.This issue affects MasterStudy LMS: from n/a through = 3.2.1...
PT-2024-36691
Name of the Vulnerable Software and Affected Versions WPLMS versions prior to 1.9.9.5.2 Description The issue affects VibeThemes WPLMS, allowing Path Traversal due to the '.../...//' vulnerability. Recommendations For versions prior to 1.9.9.5.2, update to version 1.9.9.5.2 or later to resolve th...
CVE-2024-12596: Missing Authorization
The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to arbitrary post deletion due to a missing capability check on the 'llmsdeletecert' action in all versions up to, and including, 7.8.5. This makes it possible for authenticated attackers, with...
CVE-2024-12127 Learning Management System, eLearning, Course Builder, WordPress LMS Plugin – Sikshya LMS <= 0.0.21 - Reflected Cross-Site Scripting via page Parameter
The Learning Management System, eLearning, Course Builder, WordPress LMS Plugin – Sikshya LMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘page’ parameter in all versions up to, and including, 0.0.21 due to insufficient input sanitization and output escaping. This...
CVE-2024-12127
CVE-2024-12127 — Sikshya LMS (WordPress plugin) is affected by a reflected XSS via the page parameter in versions up to 0.0.21 due to insufficient input sanitization and output escaping. This can allow unauthenticated attackers to inject scripts into pages that run when a user interacts (e.g., cl...
CVE-2024-12127 Learning Management System, eLearning, Course Builder, WordPress LMS Plugin – Sikshya LMS <= 0.0.21 - Reflected Cross-Site Scripting via page Parameter
The Learning Management System, eLearning, Course Builder, WordPress LMS Plugin – Sikshya LMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘page’ parameter in all versions up to, and including, 0.0.21 due to insufficient input sanitization and output escaping. This...
PT-2024-17450 · WordPress · Sikshya Lms
Name of the Vulnerable Software and Affected Versions: Sikshya LMS plugin for WordPress versions up to, and including, 0.0.21 Description: The issue is related to Reflected Cross-Site Scripting via the page parameter due to insufficient input sanitization and output escaping. This allows...
CVE-2024-12127: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
The Learning Management System, eLearning, Course Builder, WordPress LMS Plugin – Sikshya LMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘page’ parameter in all versions up to, and including, 0.0.21 due to insufficient input sanitization and output escaping. This...