LearnPress

Authenticated (Instructor+) Stored CrossSite Scripting via Lesson Name vulnerability <= 4.2.7.5

6.5

27 January, 2025

Open Redirection vulnerability <= 4.2.7.1

4.7

24 January, 2025

Admin+ Stored XSS vulnerability < 4.2.7.2

5.9

12 December, 2024

Course Material Sensitive Information Exposure via REST API vulnerability <= 4.2.7.3

5.3

10 December, 2024

Unauthenticated SQL Injection via 'c_only_fields' vulnerability <= 4.2.7

9.3

12 September, 2024