LearnPress

Admin+ Stored XSS vulnerability < 4.2.7.2

5.9

12 December, 2024

Course Material Sensitive Information Exposure via REST API vulnerability <= 4.2.7.3

5.3

10 December, 2024

Unauthenticated SQL Injection via 'c_only_fields' vulnerability <= 4.2.7

9.3

12 September, 2024

Unauthenticated SQL Injection via 'c_fields' vulnerability <= 4.2.7

9.3

12 September, 2024

Authenticated (Contributor+) SQL Injection via order Parameter vulnerability <= 4.2.6.9.3

8.5

8 August, 2024