Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: prasunsen Component: Namaste! Lms Clear all filters
TI-2024-33840 CVE-2024-50407 · GHSA-g768-c2cp-rxc4

WordPress Namaste! LMS plugin <= 2.6.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Namaste! LMS namaste-lms allows Reflected XSS.This issue affects Namaste! LMS: from n/a through <= 2.6.2.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00326 Published 2024-10-29 No fix listed CWE-79
TI-2024-33842 CVE-2024-50409 · GHSA-m6fg-p7cg-64mc

WordPress Namaste! LMS plugin <= 2.6.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Namaste! LMS namaste-lms allows Stored XSS.This issue affects Namaste! LMS: from n/a through <= 2.6.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00293 Published 2024-10-29 No fix listed CWE-79
TI-2024-33843 CVE-2024-50410 · GHSA-869q-v62p-q4p8

WordPress Namaste! LMS plugin <= 2.6.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Namaste! LMS namaste-lms allows Stored XSS.This issue affects Namaste! LMS: from n/a through <= 2.6.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00293 Published 2024-10-29 No fix listed CWE-79
TI-2023-04246 CVE-2023-4602 · GHSA-h974-rh4p-qm47

Namaste! LMS <= 2.6.1.1 - Reflected Cross-Site Scripting

Priority LOW 28

The Namaste! LMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'course_id' parameter in versions up to, and including, 2.6.1.1 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00662 Published 2023-11-15 No fix listed CWE-79
TI-2023-00799 CVE-2023-0844 · GHSA-3vpj-6vgf-55jc

Namaste! LMS < 2.6 - Admin+ Stored XSS

Priority MEDIUM 55

The Namaste! LMS WordPress plugin before 2.6 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00442 Published 2023-03-13 Fixed in 2.6 CWE-79
TI-2023-00519 CVE-2023-0548 · GHSA-vgj2-jqg3-3335

Namaste! LMS < 2.5.9.4 - Admin+ Stored XSS

Priority MEDIUM 55

The Namaste! LMS WordPress plugin before 2.5.9.4 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilt…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00527 Published 2023-02-27 Fixed in 2.5.9.4 CWE-79