Filtered by vendor Ideaco Subscriptions
Filtered by product Idealms Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-31788 1 Ideaco 1 Idealms 2024-11-21 9.8 Critical
IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname.
CVE-2022-31786 1 Ideaco 1 Idealms 2024-11-21 6.1 Medium
IdeaLMS 2022 allows reflected Cross Site Scripting (XSS) via the IdeaLMS/Class/Assessment/ PATH_INFO.