Idealms

CVEs (2)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2022-31788	IdeaLMS IdeaLMS	Cri	0.65	9.8	0.15		Jun 10, 2022	IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname.
CVE-2022-31786	IdeaLMS IdeaLMS	Med	0.40	6.1	0.01		Jun 21, 2022	IdeaLMS 2022 allows reflected Cross Site Scripting (XSS) via the IdeaLMS/Class/Assessment/ PATH_INFO.

CVE-2022-31788CriJun 10, 2022
IdeaLMS
IdeaLMS
risk 0.65cvss 9.8epss 0.15
IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname.
CVE-2022-31786MedJun 21, 2022
IdeaLMS
IdeaLMS
risk 0.40cvss 6.1epss 0.01
IdeaLMS 2022 allows reflected Cross Site Scripting (XSS) via the IdeaLMS/Class/Assessment/ PATH_INFO.