PT-2021-16026 · WordPress · Wplms

Name of the Vulnerable Software and Affected Versions: The WP LMS – Best WordPress LMS Plugin versions 1.1.2 and earlier Description: The issue arises from the plugin's failure to properly sanitise or validate its User Field Titles, allowing XSS payload to be used in them. Additionally, the lack ...

Unauthorized Access

pimcore/pimcore is vulnerable to unauthorized access. Lack of access checks in certain scenarios whereby an incorrect recipient ID of a notification is submitted, allows unauthorized access to system resources...