Skip to content
Sign in
Not rated

CVE-2021-25006 The MOLIE WordPress plugin through 0.5 does not escape the course_id parameter before outputting it back in the admin…

Description

The MOLIE WordPress plugin through 0.5 does not escape the course_id parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue

Affected products and versions

Product Affected versions Fixed in
MOLIE – Instructure Canvas Linking tool 0.5 No fix stated

Other CVEs of MOLIE – Instructure Canvas Linking tool

The 2 CVEs of MOLIE – Instructure Canvas Linking tool →
CVE-2021-25007 The MOLIE WordPress plugin through 0.5 does not validate and escape a post parameter before using in a SQL statement,… Not rated
Track this CVE