MAL-2025-44990 Malicious code in lesson-clothing-describe (npm)

The package lesson-clothing-describe was found to contain malicious code...

Malicious code in mail-lesson-tank (npm)

The package mail-lesson-tank was found to contain malicious code...

MAL-2025-45105 Malicious code in mail-lesson-tank (npm)

The package mail-lesson-tank was found to contain malicious code...

MAL-2025-44992 Malicious code in let-anybody-lesson (npm)

The package let-anybody-lesson was found to contain malicious code...

MAL-2025-44991 Malicious code in lesson-dream-death (npm)

The package lesson-dream-death was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2024-45691

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Moodle. When restricting access to a lesson activity with a password, certain passwords could be bypassed or less secure due to a loose...

Linux Distros Unpatched Vulnerability : CVE-2023-5539

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers. CVE-2023-5539 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2022-35650

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions. This insufficient path checks results in arbitrary...

Malicious code in debian-js-lesson-1 (npm)

The package debian-js-lesson-1 was found to contain malicious code...

Malicious code in debian-js-lesson-2 (npm)

The package debian-js-lesson-2 was found to contain malicious code...

MAL-2025-18137 Malicious code in debian-js-lesson-1 (npm)

The package debian-js-lesson-1 was found to contain malicious code...

MAL-2025-18138 Malicious code in debian-js-lesson-2 (npm)

The package debian-js-lesson-2 was found to contain malicious code...

BIT-MOODLE-2024-45691 Moodle: lesson activity password bypass through php loose comparison

A flaw was found in Moodle. When restricting access to a lesson activity with a password, certain passwords could be bypassed or less secure due to a loose comparison in the password-checking logic. This issue only affected passwords set to "magic hash" values...

BIT-MOODLE-2024-34000 moodle: stored XSS in lesson overview report via user ID number

ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk...

CVE-2024-52353

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gabriel Serafini Christian Science Bible Lesson Subjects christian-science-bible-lesson-subjects allows DOM-Based XSS.This issue affects Christian Science Bible Lesson Subjects: from n/a through =...

CVE-2019-5972

Cross-site scripting vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2019-5973

Cross-site request forgery CSRF vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

PT-2025-7687 · Sourcecodester · Sourcecodester Elearning System

Name of the Vulnerable Software and Affected Versions: SourceCodester E-Learning System version 1.0 Description: A critical issue has been found, affecting an unknown function of the file /admin/modules/lesson/index.php of the component List of Lessons Page. This issue leads to unrestricted uploa...

WordPress LearnPress plugin <= 4.2.7.5 - Authenticated (Instructor+) Stored Cross-Site Scripting via Lesson Name vulnerability

Authenticated Instructor+ Stored Cross-Site Scripting via Lesson Name vulnerability discovered by Tim Coen in WordPress Plugin LearnPress versions = 4.2.7.5...

CVE-2024-13599

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.2.7.5 due to insufficient input sanitization and output escaping of a lesson name. This makes it possible for authenticated attackers, with LP...