CVE-2021-24562CWE-639

CVE-2021-24562: vulnerability in LMS by LifterLMS – Online Course, Membership &…

LifterLMS < 4.21.2 - Access Other Student Grades/Answers via IDOR

Published · Updated

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.6%
The LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress plugin before 4.21.2 was affected by an IDOR issue, allowing students to see other student answers and grades