Read the docs

Molie Instructure Canvas Linking Tool Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Molie Instructure Canvas Linking Tool Project records in CISA KEV

No Molie Instructure Canvas Linking Tool Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Molie Instructure Canvas Linking Tool 2 records MEDIUM

Records

2 records

TI-2021-07285 CVE-2021-25007 · GHSA-7977-2v22-fwr7

MOLIE <= 0.5 - Authenticated SQL Injection

Priority MEDIUM 45

The MOLIE WordPress plugin through 0.5 does not validate and escape a post parameter before using in a SQL statement, leading to an SQL Injection

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01608 Published 2022-03-14 No fix listed CWE-89
TI-2021-07284 CVE-2021-25006 · GHSA-7763-j378-4vmx

MOLIE <= 0.5 - Reflected Cross-Site Scripting

Priority LOW 29

The MOLIE WordPress plugin through 0.5 does not escape the course_id parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00833 Published 2022-03-14 No fix listed CWE-79
Open these records in search →