CVE-2025-11304

CodeCanyon/ui-lib Mentor LMS (CodeCanyon/ui-lib Mentor LMS) is affected up to version 1.1.1. The vulnerability lies in an unknown API functionality that can cause a permissive cross-domain policy with untrusted domains, enabling remote exploitation. The exploit has been published, and the vendor ...