Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Multiple Stored Cross-Site Scripting Vulnerabilities
Vulnerability Description
The Frentix GmbH OpenOlat LMS is affected by multiple stored Cross-Site Scripting (XSS) vulnerabilities. An attacker with rights to create or edit groups can create a course with a name that contains an XSS payload. Furthermore, attackers with the permissions to create or rename a catalog (sub-category) can enter unfiltered input in the name field. In addition, attackers who are allowed to create curriculums can also enter unfiltered input in the name field. This allows an attacker to execute stored JavaScript code with the permissions of the victim in the context of the user's browser.
CVSS Information
N/A
Vulnerability Type
输入验证不恰当
Vulnerability Title
OpenOlat LMS 安全漏洞
Vulnerability Description
OpenOLAT是一个基于网络的电子学习平台，用于教学、学习、评估和交流，一个 LMS，一个学习管理系统。 OpenOlat LMS存在安全漏洞。攻击者利用该漏洞在用户浏览器中以受害者的权限执行存储的 JavaScript 代码。
CVSS Information
N/A
Vulnerability Type
N/A