Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-31788 1 Ideaco 1 Idealms 2024-11-21 9.8 Critical
IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname.
CVE-2022-31786 1 Ideaco 1 Idealms 2024-11-21 6.1 Medium
IdeaLMS 2022 allows reflected Cross Site Scripting (XSS) via the IdeaLMS/Class/Assessment/ PATH_INFO.