Tin Canny Reporting For Learndash
Approved changes feed: RSS · Atom
cpe:2.3:a:uncannyowl:tin_canny_reporting_for_learndash:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Uncannyowl (bbd8a433-cc82-5966-9d7d-d9b0c375bc34) |
|---|---|
| Product | Tin Canny Reporting For Learndash (d71a248d-a34b-5004-970d-33b9d7667f28) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-9439 |
vulnerable | 2026-06-08 05:28:01.736731 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Uncanny Owl Tin Canny LearnDash Reporting before 3.4.4 allows authenticated remote attackers to inject arbitrary web script or HTML via the search_key GET Parameter in TinCan_Content_List_Table.php, message GET Parameter in licensing.php, tc_filter_group parameter in reporting-admin-menu.php, tc_filter_user parameter in reporting-admin-menu.php, tc_filter_course parameter in reporting-admin-menu.php, tc_filter_lesson parameter in reporting-admin-menu.php, tc_filter_module parameter in reporting-admin-menu.php, tc_filter_action parameter in reporting-admin-menu.php, tc_filter_data_range parameter in reporting-admin-menu.php, or tc_filter_data_range_last parameter in reporting-admin-menu.php.
Published: 2020-12-23T15:47:14.000Z
Updated: 2024-08-04T10:26:16.177Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.