Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown

CVE-2022-31786

Disclosure Date: June 21, 2022 (last updated February 23, 2025)
IdeaLMS 2022 allows reflected Cross Site Scripting (XSS) via the IdeaLMS/Class/Assessment/ PATH_INFO.
Attacker Value
Unknown

CVE-2022-31788

Disclosure Date: June 10, 2022 (last updated February 23, 2025)
IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname.