CVE-2021-36746

Blackboard Learn through 9.1 allows XSS by an authenticated user via the Assignment Instructions HTML editor...

CVE-2021-36747

Blackboard Learn through 9.1 allows XSS by an authenticated user via the Feedback to Learner form...

CVE-2021-36746

Blackboard Learn through 9.1 allows XSS by an authenticated user via the Assignment Instructions HTML editor...

CVE-2021-36746

Blackboard Learn through 9.1 allows XSS by an authenticated user via the Assignment Instructions HTML editor...

Design/Logic Flaw

Blackboard Learn through 9.1 allows XSS by an authenticated user via the Assignment Instructions HTML editor...

Design/Logic Flaw

Blackboard Learn through 9.1 allows XSS by an authenticated user via the Feedback to Learner form...

CVE-2021-36746

Blackboard Learn (through version 9.1) is vulnerable to cross-site scripting (XSS) when an authenticated user uses the Assignment Instructions HTML editor. The issue is documented across multiple sources as an XSS flaw affecting Blackboard Learn 9.1, with the underlying cause described as a secur...

CVE-2021-36746

Blackboard Learn through 9.1 allows XSS by an authenticated user via the Assignment Instructions HTML editor...

CVE-2021-36747

CVE-2021-36747 affects Blackboard Learn (through version 9.1). An authenticated user can trigger cross-site scripting via the Feedback to Learner form. Root cause is an input/output handling flaw in the Feedback to Learner workflow that allows script execution. Impact is described as cross-site s...

CVE-2021-36747

Blackboard Learn through 9.1 allows XSS by an authenticated user via the Feedback to Learner form...

Blackboard Learn 跨站脚本漏洞

Blackboard Learn is a learning management system from the US-based Blackboard, Inc. A security vulnerability exists in Blackboard Learn that allows authenticated users to perform XSS via the Assignment Instructions HTML editor...

Blackboard Learn 跨站脚本漏洞

Blackboard Learn is a learning management system from Blackboard, Inc. in the United States. Blackboard Learn suffers from a security vulnerability that allows authenticated users to cross-site by giving feedback to learners...

All Vulnerabilities for learn-test.mcc.gov Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| learn-test.mcc.gov ---|--- Open Bug...

WordPress WP Learn Manager 1.1.2 Plugin - Stored Cross-Site Scripting Vulnerability

Exploit Title: WordPress Plugin WP Learn Manager 1.1.2 - Stored Cross-Site Scripting XSS Exploit Author: Mohammed Adam Vendor Homepage: https://wplearnmanager.com/ Software Link: https://wordpress.org/plugins/learn-manager/ Version: 1.1.2 References link:...

WordPress Plugin WP Learn Manager 1.1.2 - Stored Cross-Site Scripting (XSS)

Exploit Title: WordPress Plugin WP Learn Manager 1.1.2 - Stored Cross-Site Scripting XSS Date: July 2, 2021 Exploit Author: Mohammed Adam Vendor Homepage: https://wplearnmanager.com/ Software Link: https://wordpress.org/plugins/learn-manager/ Version: 1.1.2 References link:...

WordPress WP Learn Manager 1.1.2 Cross Site Scripting

Exploit Title: WordPress Plugin WP Learn Manager 1.1.2 - Stored Cross-Site Scripting XSS Date: July 2, 2021 Exploit Author: Mohammed Adam Vendor Homepage: https://wplearnmanager.com/ Software Link: https://wordpress.org/plugins/learn-manager/ Version: 1.1.2 References link:...

CVE-2021-0391

In onCreate of ChooseTypeAndAccountActivity.java, there is a possible way to learn the existence of an account, without permissions, due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for...

graduation_design

This is a Python script for a web intrusion detection system using machine learning. The script uses the scikit-learn library to implement a supervised learning approach. It collects and preprocesses normal requests and attack payloads, and uses a Support Vector Machine SVM to classify new reques...

CVE-2020-35650

Multiple cross-site scripting XSS vulnerabilities in Uncanny Groups for LearnDash before v3.7 allow authenticated remote attackers to inject arbitrary JavaScript or HTML via the ulgmcoderedeem POST Parameter in user-code-redemption.php, the ulgmuserfirst POST Parameter in...

Uncanny Owl Groups for LearnDash Cross-Site Scripting Vulnerability

Uncanny Owl Groups for LearnDash is a plugin from Uncanny Owl Canada that provides the ability to sell courses for LearnDash in Wordpress. A cross-site scripting vulnerability exists in Uncanny Groups for LearnDash versions prior to v3.7, which allows an authenticated, remote attacker to inject...