cluevo

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

cluevo records in CISA KEV

No cluevo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Learning Management System 2 records LOW

Records

2 records in Learning Management System · all components

TI-2023-21405 CVE-2023-40607 · GHSA-fwmv-c6mj-fvc3

WordPress CLUEVO LMS, E-Learning Platform Plugin <= 1.10.0 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in CLUEVO CLUEVO LMS, E-Learning Platform plugin <= 1.10.0 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00256 Published 2023-10-06 No fix listed CWE-352

TI-2021-07307 CVE-2021-25029 · GHSA-xrvc-5f74-4x4x

Cluevo < 1.8.1 - Admin+ Stored Cross Site Scripting

LOW 23

The CLUEVO LMS, E-Learning Platform WordPress plugin before 1.8.1 does not sanitise and escape Course's module, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00598 Published 2022-02-07 Fixed in 1.8.1 CWE-79

Open these records in search →

Critical	0
High	1
Medium	3
Low	0
No CVSS	0