Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Easy Student Results Project Clear all filters
TI-2022-02195 CVE-2022-2379 · GHSA-756m-3q55-x5q6

Easy Student Results <= 2.2.8 - Sensitive Information Disclosure via REST API

Priority LOW 39

The Easy Student Results WordPress plugin through 2.2.8 lacks authorisation in its REST API, allowing unauthenticated users to retrieve information related to the courses, exams, departments as well as student's grades a…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03527 Published 2022-08-15 No fix listed CWE-862
TI-2022-02194 CVE-2022-2378 · GHSA-vr4q-67qg-vvf6

Easy Student Results <= 2.2.8 - Reflected Cross-Site Scripting

Priority LOW 28

The Easy Student Results WordPress plugin through 2.2.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00644 Published 2022-08-15 No fix listed CWE-79