CVE-2020-9439

Multiple cross-site scripting XSS vulnerabilities in Uncanny Owl Tin Canny LearnDash Reporting before 3.4.4 allows authenticated remote attackers to inject arbitrary web script or HTML via the searchkey GET Parameter in TinCanContentListTable.php, message GET Parameter in licensing.php,...

CVE-2020-9439

Multiple cross-site scripting XSS vulnerabilities in Uncanny Owl Tin Canny LearnDash Reporting before 3.4.4 allows authenticated remote attackers to inject arbitrary web script or HTML via the searchkey GET Parameter in TinCanContentListTable.php, message GET Parameter in licensing.php,...

CVE-2020-9439

Uncanny Owl Tin Canny LearnDash Reporting prior to 3.4.4 contains multiple XSS vulnerabilities exploitable by authenticated remote actors via several GET parameters (e.g., search_key in TinCan_Content_List_Table.php; licensing.php; tc_filter_* in reporting-admin-menu.php; tc_filter_data_range/ tc...

Uncanny Owl Tin Canny LearnDash Reporting Cross-Site Scripting Vulnerability

Uncanny Owl Tin Canny LearnDash Reporting is a plugin from Uncanny Owl Canada that provides learning record storage functionality for Wordpress. Uncanny Owl Tin Canny LearnDash Reporting before 3.4.4 has a security vulnerability that originates from the following script or parameter: searchkey GE...