Sensei LMS < 4.5.0 - Unauthenticated Private Messages Disclosure via Rest API
18Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 2.0%
probabilidade de exploração
2.0%top 21% das CVEs
exploração observada
nãonenhuma fonte reporta
The Sensei LMS WordPress plugin before 4.5.0 does not have proper permissions set in one of its REST endpoint, allowing unauthenticated users to access private messages sent to teachers
Produtos afetados
Unknown · Sensei LMS