CVE-2021-25006
14.03.2022, 15:15
The MOLIE WordPress plugin through 0.5 does not escape the course_id parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue
| Vendor | Product | Version |
|---|---|---|
| molie_instructure_canvas_linking_tool_project | molie_instructure_canvas_linking_tool | 𝑥 ≤ 0.5 |
𝑥
= Vulnerable software versions