EUVD-2019-4414

Malware in sbrugna...

HT2 Labs Learning Locker Cross-Site Scripting Vulnerability

HT2 Labs Learning Locker is an open source learning record repository. A security vulnerability exists in HT2 Labs Learning Locker version 3.15.1. An attacker can exploit this vulnerability to inject malicious HTML and JavaScript code into the DOM of a website...

CVE-2019-12834

HT2 Labs Learning Locker 3.15.1 has a cross-site scripting (XSS) flaw allowing injection of HTML/JavaScript into the DOM via PATH_INFO to the dashboards/ URI. The vulnerability is documented across multiple CVE records in the connected set, with consistent description of DOM-based injection and l...

PT-2019-12974

Name of the Vulnerable Software and Affected Versions HT2 Labs Learning Locker version 3.15.1 Description The issue allows for the injection of malicious HTML and JavaScript code into the website's DOM via the PATH INFO to the "dashboards/" URI. Recommendations For HT2 Labs Learning Locker versio...