Read the docs

Easy Student Results Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Easy Student Results Project records in CISA KEV

No Easy Student Results Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Easy Student Results 2 records LOW

Records

2 records

TI-2022-02195 CVE-2022-2379 · GHSA-756m-3q55-x5q6

Easy Student Results <= 2.2.8 - Sensitive Information Disclosure via REST API

Priority LOW 39

The Easy Student Results WordPress plugin through 2.2.8 lacks authorisation in its REST API, allowing unauthenticated users to retrieve information related to the courses, exams, departments as well as student's grades a…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03527 Published 2022-08-15 No fix listed CWE-862
TI-2022-02194 CVE-2022-2378 · GHSA-vr4q-67qg-vvf6

Easy Student Results <= 2.2.8 - Reflected Cross-Site Scripting

Priority LOW 28

The Easy Student Results WordPress plugin through 2.2.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00644 Published 2022-08-15 No fix listed CWE-79
Open these records in search →