CVE-2024-25973: Improper Input Validation

The Frentix GmbH OpenOlat LMS is affected by multiple stored Cross-Site Scripting XSS vulnerabilities. An attacker with rights to create or edit groups can create a course with a name that contains an XSS payload. Furthermore, attackers with the permissions to create or rename a catalog...

PT-2024-21247

Name of the Vulnerable Software and Affected Versions Frentix GmbH OpenOlat LMS affected versions not specified Description The issue concerns multiple stored Cross-Site Scripting XSS vulnerabilities. An attacker with rights to create or edit groups can create a course with a name that contains a...