Ideaco Idealms
2 CVEs affecting Ideaco Idealms. Latest disclosed: 2022-06-21. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-31788 | Critical | 9.8 | 2022-06-10 | IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname. |
CVE-2022-31786 | Medium | 6.1 | 2022-06-21 | IdeaLMS 2022 allows reflected Cross Site Scripting (XSS) via the IdeaLMS/Class/Assessment/ PATH_INFO. |