5319 matches found
WordPress Namaste! LMS Plugin <= 2.6.2 is vulnerable to Cross Site Scripting (XSS)
Software Namaste! LMS Type Plugin Vulnerable versions = 2.6.2 Fixed in 2.6.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50409 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 084203fa02ee Credits Hakiduck Required privilege Student...
WordPress Namaste! LMS Plugin <= 2.6.3 is vulnerable to PHP Object Injection
Software Namaste! LMS Type Plugin Vulnerable versions = 2.6.3 Fixed in 2.6.4 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-50408 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID eee109caa2fe Credits Mika Required privilege Subscriber Publishe...
WordPress Namaste! LMS Plugin <= 2.6.2 is vulnerable to Cross Site Scripting (XSS)
Software Namaste! LMS Type Plugin Vulnerable versions = 2.6.2 Fixed in 2.6.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50407 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8fa25cac3b50 Credits Hakiduck Required privilege...
WordPress Namaste! LMS Plugin <= 2.6.4 is vulnerable to Cross Site Scripting (XSS)
Software Namaste! LMS Type Plugin Vulnerable versions = 2.6.4 Fixed in 2.6.4.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50410 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 07c7a15d0ac8 Credits Hazem Brini Required privilege...
Exploit for Unrestricted Upload of File with Dangerous Type in Chamilo Chamilo_Lms
CVE-2023-4220-RCE Summary Starlabs advisoryhtt...
PT-2024-45: Evaluation of untrusted user input in Chamilo LMS
The vulnerability was identified in Chamilo LMS versions 1.11.x up to 1.11.26. The discovered vulnerability can be exploited by an unauthenticated attacker, if he sends SOAP request with parameter, which is evaluated without filtering, that leads to Remote Code Execution. Vulnerability status:...
PT-2024-15966 · WordPress · Masteriyo - Lms
Name of the Vulnerable Software and Affected Versions: Masteriyo LMS – eLearning and Online Course Builder for WordPress versions prior to 1.13.3 Description: The issue is related to Stored Cross-Site Scripting via the question's content parameter due to insufficient input sanitization and output...
Exploit for SQL Injection in Thimpress Learnpress
CVE-2024-8529 LearnPress – WordPress LMS Plugin = 4.2.7 -...
CVE-2024-43990
Insertion of Sensitive Information into Log File vulnerability in StylemixThemes Masterstudy LMS Starter.This issue affects Masterstudy LMS Starter: from n/a through 1.1.8...
CVE-2024-43990
CVE-2024-43990 (Masterstudy LMS Starter) describes an unauthenticated sensitive information exposure caused by insertion of data into log files. The vulnerability affects Masterstudy LMS Starter versions up to and including 1.1.8. Public sources in the Connected documents indicate this is a WordP...
CVE-2024-43990 WordPress Masterstudy LMS Starter theme <= 1.1.8 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information into Log File vulnerability in StylemixThemes Masterstudy LMS Starter.This issue affects Masterstudy LMS Starter: from n/a through 1.1.8...
CVE-2024-43990 WordPress Masterstudy LMS Starter theme <= 1.1.8 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information into Log File vulnerability in StylemixThemes Masterstudy LMS Starter.This issue affects Masterstudy LMS Starter: from n/a through 1.1.8...
Top LMS Training Tips for Effective Learning
LMS training is vital for modern education and corporate learning, enabling efficient course delivery and progress tracking. To…...
PT-2024-30855 · Unknown · Masterstudy Lms Starter
Name of the Vulnerable Software and Affected Versions: Masterstudy LMS Starter versions 1.1.8 and below Description: The issue is related to the insertion of sensitive information into log files. This could potentially expose sensitive data. Recommendations: For Masterstudy LMS Starter versions...
CVE-2024-43990: Insertion of Sensitive Information into Log File
Insertion of Sensitive Information into Log File vulnerability in StylemixThemes Masterstudy LMS Starter.This issue affects Masterstudy LMS Starter: from n/a through 1.1.8...
PT-2024-8549
Name of the Vulnerable Software and Affected Versions Chamilo LMS affected versions not specified Description The issue is related to the lack of measures to neutralize instructions in dynamically executed code in the Chamilo LMS electronic learning and content management system. Exploitation of...
WordPress LMS 4.2.7 SQL Injection Vulnerability
CVE-2024-8522 LearnPress – WordPress LMS Plugin execute class-lp-course-db.php:564, LPCourseDB-getcourses Courses.php:241, LearnPress\Models\Courses::getcourses class-lp-rest-courses-v1-controller.php:502, LPJwtCoursesV1Controller-getcourses class-wp-rest-server.php:1230,...
GHSA-84JW-G43V-8GJM DOM Clobbering Gadget found in Rspack's AutoPublicPathRuntimeModule that leads to XSS
Hi, Rspack|Webpack developer team! Summary We discovered a DOM Clobbering vulnerability in Webpack’s AutoPublicPathRuntimeModule. The DOM Clobbering gadget in the module can lead to cross-site scripting XSS in web pages where scriptless attacker-controlled HTML elements e.g., an img tag with an...
DOM Clobbering Gadget found in Rspack's AutoPublicPathRuntimeModule that leads to XSS
Hi, Rspack|Webpack developer team! Summary We discovered a DOM Clobbering vulnerability in Webpack’s AutoPublicPathRuntimeModule. The DOM Clobbering gadget in the module can lead to cross-site scripting XSS in web pages where scriptless attacker-controlled HTML elements e.g., an img tag with an...