Skip to content
OpenAdvisories

Vendor

cluevo

3 known vulnerabilities.

Products

CLUEVO LMS, E-Learning Platform 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-11328

    CLUEVO LMS, E-Learning Platform <= 1.13.2 - Reflected Cross-Site Scripting

    The CLUEVO LMS, E-Learning Platform plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.13.2. This makes it pos…

    cluevo CLUEVO LMS, E-Learning Platform Web / CMS
  • Medium 4.3
    CVE-2024-11444

    CLUEVO LMS, E-Learning Platform <= 1.13.2 - Cross-Site Request Forgery to Module Deletion

    The CLUEVO LMS, E-Learning Platform plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.13.2. This is due to missing or incorrect nonce validation on the cluevo_render_module_ui() function. This makes it po…

    cluevo CLUEVO LMS, E-Learning Platform Web / CMS
  • Medium 4.3
    CVE-2023-40607

    WordPress CLUEVO LMS, E-Learning Platform Plugin <= 1.10.0 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in CLUEVO CLUEVO LMS, E-Learning Platform plugin <= 1.10.0 versions.

    cluevo CLUEVO LMS, E-Learning Platform