Description

A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers.

Remediation

References

CVE-2023-5539

Related Vulnerabilities

WordPress Plugin Post Form-Registration Form-Profile Form for User Profiles and Content Forms for User Submissions Cross-Site Scripting (2.7.2)

WordPress Plugin Abandoned Cart Recovery for WooCommerce Cross-Site Request Forgery (1.0.4)

Oracle JRE Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-3174)

WordPress Plugin Custom Search by BestWebSoft Unspecified Vulnerability (1.21)

WordPress Plugin Interactive Geo Maps Cross-Site Scripting (1.5.8)

Severity

High

Classification

CVE-2023-5539 CWE-94 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities