eduNEXT Open edX LMS Vulnerable to Reflected XSS
CVE-2024-52452

7.1HIGH

Key Information:

Vendor

WordPress
Status
Open Edx Lms
Vendor
CVE Published:
2 December 2024

What is CVE-2024-52452?

A reflected cross-site scripting (XSS) vulnerability in the eduNEXT Open edX LMS allows attackers to inject malicious scripts into web pages viewed by users. This can lead to unauthorized actions being performed on behalf of users or sensitive information being disclosed. The vulnerability affects versions of Open edX LMS from n/a through 2.6.1, making it essential for administrators to apply necessary security measures and updates to prevent exploitation.

Affected Version(s)

Open edX LMS <= 2.6.1

References

https://patchstack.com/database/wordpress/plugin/edunext-...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mika (Patchstack Alliance)
.