CVE-2021-24562

High

The LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress plugin before 4.21.2 was affected by an…

WPScan·CWE-639·Published 2021-08-23

CVSS

7.5

EPSS

0.02

KEV

Exploits

cve.orgen

208 chars

The LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress plugin before 4.21.2 was affected by an IDOR issue, allowing students to see other student answers and grades

NVDen

208 chars

NVDes

263 chars

El plugin LMS by LifterLMS - Online Course, Membership & Learning Management System para WordPress versiones anteriores a 4.21.2, estaba afectado por un problema de tipo IDOR, permitiendo a estudiantes ver las respuestas y calificaciones de otros estudiantes.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N