Read the docs

cluevo

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

cluevo records in CISA KEV

No cluevo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Learning Management System 2 records LOW

Records

4 records

TI-2024-10494 CVE-2024-11328 · GHSA-v962-p99x-97v2

CLUEVO LMS, E-Learning Platform <= 1.13.2 - Reflected Cross-Site Scripting

Priority LOW 28

The CLUEVO LMS, E-Learning Platform plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up to, a…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00502 Published 2025-01-09 No fix listed CWE-79
TI-2021-07307 CVE-2021-25029 · GHSA-xrvc-5f74-4x4x

Cluevo < 1.8.1 - Admin+ Stored Cross Site Scripting

Priority LOW 23

The CLUEVO LMS, E-Learning Platform WordPress plugin before 1.8.1 does not sanitise and escape Course's module, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00598 Published 2022-02-07 Fixed in 1.8.1 CWE-79
Open these records in search →