CVE-2023-50875

Mô tả

Tham khảo

• patchstack.com/database/vulnerability/sensei-lms/wordpress-sensei-lms-plugin-4-17-0-cross-site-scripting-xss-vulnerability · Third Party Advisory

Lỗ hổng khác của sensei lms

• CVE-2024-8009TRUNG BÌNH 4.3The Sensei LMS WordPress plugin before 4.20.0 disclose all users of the blog including their email address to teachers on the students page
• CVE-2025-0466TRUNG BÌNH 5.3The Sensei LMS WordPress plugin before 4.24.4 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak…
• CVE-2024-7786TRUNG BÌNH 5.3The Sensei LMS WordPress plugin before 4.24.2 does not properly protect some its REST API routes, allowing unauthenticated attackers to lea…
• CVE-2022-2080TRUNG BÌNH 4.3The Sensei LMS WordPress plugin before 4.5.2 does not ensure that the sender of a private message is either the teacher or the original send…
• CVE-2022-2034TRUNG BÌNH 5.3The Sensei LMS WordPress plugin before 4.5.0 does not have proper permissions set in one of its REST endpoint, allowing unauthenticated user…