Approved changes feed: RSS · Atom

cpe:2.3:a:codecanyon:mentor_lms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodecanyon (a6a90f23-b98d-5184-9eae-192ed15afa35)
ProductMentor Lms (5d9d08c4-cbae-5cd9-bfc9-acf2824c51e5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-11304 vulnerable 2026-06-03 14:58:35.892161 CodeCanyon/ui-lib Mentor LMS API cross-domain policy
MEDIUM (6.3)
A flaw has been found in CodeCanyon/ui-lib Mentor LMS up to 1.1.1. Affected by this vulnerability is an unknown functionality of the component API. Executing manipulation can lead to permissive cross-domain policy with untrusted domains. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-10-05T21:02:06.131Z
Updated: 2025-10-06T16:11:03.752Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.