Ideaco

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Ideaco records in CISA KEV

No Ideaco vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Idealms · all components

TI-2022-13681 CVE-2022-31788 · GHSA-cf44-q5xm-mxm4

MEDIUM 58

IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.14658 Published 2022-06-10 No fix listed CWE-89

TI-2022-13679 CVE-2022-31786 · GHSA-mvq8-3mfv-fx2v

LOW 28

IdeaLMS 2022 allows reflected Cross Site Scripting (XSS) via the IdeaLMS/Class/Assessment/ PATH_INFO.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00726 Published 2022-06-21 No fix listed CWE-79