CVE-2021-24562 Information

Description

The LMS by LifterLMS – Online Course Membership & Learning Management System Plugin for WordPress plugin before 4.21.2 was affected by an IDOR issue allowing students to see other student answers and grades

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Reference

https://make.lifterlms.com/2021/05/17/lifterlms-version-4-21-2/ https://wpscan.com/vulnerability/d45bb744-4a0d-4af0-aa16-71f7e3ea6e00

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

NONE

Base Score

NONE

Base Severity

7.5