222 matches found
CVE-2022-0332
CVE-2022-0332 Moodle 3.11 to 3.11.4 - SQL injection POC GET...
CVE-2026-112867
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in H5P H5P h5p allows Stored XSS.This issue affects H5P: from n/a through 1.17.9...
CVE-2026-112867 WordPress H5P plugin <= 1.17.9 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in H5P H5P h5p allows Stored XSS.This issue affects H5P: from n/a through 1.17.9...
CVE-2026-112867
The WordPress H5P plugin (versions up to and including 1.17.9 ) is vulnerable to a Stored Cross-Site Scripting (XSS) issue due to the Improper Neutralization of Input During Web Page Generation . An attacker can exploit this flaw to execute malicious scripts in the context of the victim's browser...
EUVD-2026-108027
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in H5P H5P h5p allows Stored XSS.This issue affects H5P: from n/a through 1.17.9...
CVE-2026-112867 WordPress H5P plugin <= 1.17.9 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in H5P H5P h5p allows Stored XSS.This issue affects H5P: from n/a through 1.17.9...
WordPress H5P plugin <= 1.17.9 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin H5P versions = 1.17.9...
PT-2026-121283
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in H5P H5P h5p allows Stored XSS.This issue affects H5P: from n/a through 1.17.9...
CVE-2026-112868
Authorization Bypass Through User-Controlled Key vulnerability in H5P H5P h5p allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects H5P: from n/a through 1.17.9...
EUVD-2026-107427
Authorization Bypass Through User-Controlled Key vulnerability in H5P H5P h5p allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects H5P: from n/a through 1.17.9...
CVE-2026-112868 WordPress H5P plugin <= 1.17.9 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in H5P H5P h5p allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects H5P: from n/a through 1.17.9...
CVE-2026-112868
The WordPress H5P plugin (versions
CVE-2026-112868 WordPress H5P plugin <= 1.17.9 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in H5P H5P h5p allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects H5P: from n/a through 1.17.9...
WordPress H5P plugin <= 1.17.9 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by dcs in WordPress Plugin H5P versions = 1.17.9...
icc0rz H5P cross-site scripting vulnerability
icc0rz H5P versions 1.17.9 and earlier contain a cross-site scripting vulnerability. This flaw stems from improper input sanitization during web page generation and may lead to stored cross-site scripting attacks...
icc0rz H5P authorization issue vulnerability
Versions icc0rz H5P 1.17.9 and earlier contain an authorization issue vulnerability. This vulnerability arises from bypassing authorization via user-controlled keys, exploiting improperly configured access control security levels, which may lead to unauthorized access...
PT-2026-120728
šØ CVE-2026-112868 Authorization Bypass Through User-Controlled Key vulnerability in H5P H5P h5p allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects H5P: from n/a through 1.17.9. š@cveNotify...
h5p-nodejs-library Cross Site Scripting
A persistent cross site scripting vulnerability has been identified in the H5P module h5p-nodejs-library by Lumi Education UG in versions prior to 9.3.3. The vulnerability allows users to inject malicious JavaScript code in text fields. This code is then executed in victims' browsers when viewing...
H5P Nodejs Library 10.0.4 Cross Site Scripting
Lumi Education h5p-nodejs-library versions through 10.0.4 contain a cross site scripting vulnerability due to insufficient validation of files contained in uploaded H5P content. An attacker can upload content containing malicious JavaScript that executes in another user's browser when the affecte...
CVE-2025-7062
A stored cross-site scripting XSS vulnerability has been identified in the H5P module h5p-nodejs-library by Lumi Education UG in versions up to and including 10.0.4. The library allows users to upload H5P content that contains malicious JavaScript. This code is then executed in the browsers of...