WordPress Masteriyo LMS plugin <= 1.13.3 - Authenticated (Student+) Stored Cross-Site Scripting vulnerability

Authenticated Student+ Stored Cross-Site Scripting vulnerability discovered by floerer in WordPress Plugin Masteriyo - LMS versions = 1.13.3...

CVE-2024-50408

Deserialization of Untrusted Data vulnerability in Kiboko Labs Namaste! LMS allows Object Injection.This issue affects Namaste! LMS: from n/a through 2.6.3...

CVE-2024-50408

Deserialization of Untrusted Data vulnerability in Bob Namaste! LMS namaste-lms allows Object Injection.This issue affects Namaste! LMS: from n/a through = 2.6.3...

CVE-2024-50408 WordPress Namaste! LMS plugin <= 2.6.3 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Bob Namaste! LMS namaste-lms allows Object Injection.This issue affects Namaste! LMS: from n/a through = 2.6.3...

CVE-2024-50408 WordPress Namaste! LMS plugin <= 2.6.3 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Bob Namaste! LMS namaste-lms allows Object Injection.This issue affects Namaste! LMS: from n/a through = 2.6.3...

CVE-2024-50408

CVE-2024-50408 concerns Namaste! LMS for WordPress. The Namaste! LMS plugin, versions n/a through 2.6.3, is affected by a PHP Object Injection vulnerability due to unsafe deserialization of untrusted data, enabling object injection. This entry is corroborated by Patchstack, Red Hat, CVE records, ...

PT-2024-34181 · Unknown · Namaste! Lms

Name of the Vulnerable Software and Affected Versions: Namaste! LMS versions n/a through 2.6.3 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This can potentially lead to security breaches by injecting malicious objects into the system...

WordPress Masteriyo - LMS Plugin <= 1.13.3 is vulnerable to Privilege Escalation

Software Masteriyo - LMS Type Plugin Vulnerable versions = 1.13.3 Fixed in 1.13.4 OWASP Top 10 A5: Broken Access Control Classification Privilege Escalation CVE CVE-2024-10008 Patch priority Medium CVSS severity Medium 8.8 Developer Masteriyo PSID c25147bb0430 Credits floerer Required privilege...

WordPress Masteriyo - LMS Plugin <= 1.13.3 is vulnerable to Cross Site Scripting (XSS)

Software Masteriyo - LMS Type Plugin Vulnerable versions = 1.13.3 Fixed in 1.13.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10000 Patch priority Low CVSS severity Low 6.5 Developer Masteriyo PSID 896bb27d11e1 Credits floerer Required privilege...

WordPress plugin Namaste! LMS 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

Exploit for Unrestricted Upload of File with Dangerous Type in Chamilo Chamilo_Lms

Chamilo LMS CVE-2023-4220 Exploit Overview This script ex...

Exploit for Unrestricted Upload of File with Dangerous Type in Chamilo Chamilo_Lms

Chamilo LMS CVE-2023-4220 Exploit Overview This script ex...

WordPress Namaste! LMS plugin <= 2.6.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Hazem Brini Patchstack Alliance in WordPress Plugin Namaste! LMS versions = 2.6.4...

WordPress Namaste! LMS plugin <= 2.6.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Hakiduck Patchstack Alliance in WordPress Plugin Namaste! LMS versions = 2.6.2...

WordPress Namaste! LMS Plugin <= 2.6.2 is vulnerable to Cross Site Scripting (XSS)

Software Namaste! LMS Type Plugin Vulnerable versions = 2.6.2 Fixed in 2.6.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50409 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 084203fa02ee Credits Hakiduck Required privilege Student...

WordPress Namaste! LMS Plugin <= 2.6.3 is vulnerable to PHP Object Injection

Software Namaste! LMS Type Plugin Vulnerable versions = 2.6.3 Fixed in 2.6.4 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-50408 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID eee109caa2fe Credits Mika Required privilege Subscriber Publishe...

WordPress Namaste! LMS Plugin <= 2.6.4 is vulnerable to Cross Site Scripting (XSS)

Software Namaste! LMS Type Plugin Vulnerable versions = 2.6.4 Fixed in 2.6.4.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50410 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 07c7a15d0ac8 Credits Hazem Brini Required privilege...

WordPress Namaste! LMS Plugin <= 2.6.2 is vulnerable to Cross Site Scripting (XSS)

Software Namaste! LMS Type Plugin Vulnerable versions = 2.6.2 Fixed in 2.6.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50407 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8fa25cac3b50 Credits Hakiduck Required privilege...

Exploit for Unrestricted Upload of File with Dangerous Type in Chamilo Chamilo_Lms

CVE-2023-4220-RCE Summary Starlabs advisoryhtt...

PT-2024-45: Evaluation of untrusted user input in Chamilo LMS

The vulnerability was identified in Chamilo LMS versions 1.11.x up to 1.11.26. The discovered vulnerability can be exploited by an unauthenticated attacker, if he sends SOAP request with parameter, which is evaluated without filtering, that leads to Remote Code Execution. Vulnerability status:...