Approved changes feed: RSS · Atom

cpe:2.3:a:ui-lib:mentor_lms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUi Lib (8191354c-a014-5dff-bcac-0e8c55b7a986)
ProductMentor Lms (a48b8df9-a144-565f-aa60-ec7af942a67a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-11304 vulnerable 2026-06-08 07:02:28.568908 CodeCanyon/ui-lib Mentor LMS API cross-domain policy
MEDIUM (6.3)
A flaw has been found in CodeCanyon/ui-lib Mentor LMS up to 1.1.1. Affected by this vulnerability is an unknown functionality of the component API. Executing manipulation can lead to permissive cross-domain policy with untrusted domains. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-10-05T21:02:06.131Z
Updated: 2025-10-06T16:11:03.752Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.