~/products/ideaco/idealms

pipeline liveDigest Docs

Ideaco Idealms vulnerabilities

2 known vulnerabilities affecting ideaco/idealms.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1MEDIUM1

Vulnerabilities

SortPage 1 of 1

CVE-2022-31788P2CRITICALCVSS 9.8v20222022-06-10

CVE-2022-31788 [CRITICAL] CWE-89 CVE-2022-31788: IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&Cl IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname.

CVE-2022-31786P4MEDIUMCVSS 6.1v20222022-06-21

CVE-2022-31786 [MEDIUM] CWE-79 CVE-2022-31786: IdeaLMS 2022 allows reflected Cross Site Scripting (XSS) via the IdeaLMS/Class/Assessment/ PATH_INFO IdeaLMS 2022 allows reflected Cross Site Scripting (XSS) via the IdeaLMS/Class/Assessment/ PATH_INFO.