PT-2020-20660

Name of the Vulnerable Software and Affected Versions Uncanny Owl Tin Canny LearnDash Reporting versions prior to 3.4.4 Description The issue allows authenticated remote attackers to inject arbitrary web script or HTML via several parameters, including the search key GET parameter in TinCan Conte...

CVE-2020-9439: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Uncanny Owl Tin Canny LearnDash Reporting before 3.4.4 allows authenticated remote attackers to inject arbitrary web script or HTML via the searchkey GET Parameter in TinCanContentListTable.php, message GET Parameter in licensing.php,...