Read the docs

prasunsen

Records84All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high18CVSS 7.0–8.9

Exploited now

prasunsen records in CISA KEV

No prasunsen vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Chained Quiz 19 records MEDIUM Arigato Autoresponder And Newsletter 16 records MEDIUM Watu Quiz 12 records HIGH Namaste! Lms 8 records HIGH Hostel 5 records MEDIUM Konnichiwa 1 record LOW Moolamojo 1 record LOW Watupro 1 record LOW

Records

8 records in Namaste! Lms · all components

TI-2023-00799 CVE-2023-0844 · GHSA-3vpj-6vgf-55jc

Namaste! LMS < 2.6 - Admin+ Stored XSS

Priority MEDIUM 55

The Namaste! LMS WordPress plugin before 2.6 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00442 Published 2023-03-13 Fixed in 2.6 CWE-79
TI-2023-00519 CVE-2023-0548 · GHSA-vgj2-jqg3-3335

Namaste! LMS < 2.5.9.4 - Admin+ Stored XSS

Priority MEDIUM 55

The Namaste! LMS WordPress plugin before 2.5.9.4 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilt…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00527 Published 2023-02-27 Fixed in 2.5.9.4 CWE-79
TI-2024-33840 CVE-2024-50407 · GHSA-g768-c2cp-rxc4

WordPress Namaste! LMS plugin <= 2.6.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Namaste! LMS namaste-lms allows Reflected XSS.This issue affects Namaste! LMS: from n/a through <= 2.6.2.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00326 Published 2024-10-29 No fix listed CWE-79
TI-2024-33843 CVE-2024-50410 · GHSA-869q-v62p-q4p8

WordPress Namaste! LMS plugin <= 2.6.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Namaste! LMS namaste-lms allows Stored XSS.This issue affects Namaste! LMS: from n/a through <= 2.6.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00293 Published 2024-10-29 No fix listed CWE-79
TI-2024-33842 CVE-2024-50409 · GHSA-m6fg-p7cg-64mc

WordPress Namaste! LMS plugin <= 2.6.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Namaste! LMS namaste-lms allows Stored XSS.This issue affects Namaste! LMS: from n/a through <= 2.6.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00293 Published 2024-10-29 No fix listed CWE-79
TI-2023-04246 CVE-2023-4602 · GHSA-h974-rh4p-qm47

Namaste! LMS <= 2.6.1.1 - Reflected Cross-Site Scripting

Priority LOW 28

The Namaste! LMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'course_id' parameter in versions up to, and including, 2.6.1.1 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00662 Published 2023-11-15 No fix listed CWE-79
Open these records in search →