Molie Instructure Canvas Linking Tool Project CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2021-25007

MOLIE <= 0.5 - Authenticated SQL Injection

The MOLIE WordPress plugin through 0.5 does not validate and escape a post parameter before using in a SQL statement, leading to an SQL Injection

CVSS 3.1 · 9.8 Critical EPSS 1.6% KEV · Not listed

Vendors

Molie Instructure Canvas Linking Tool Project

Products

Molie Instructure Canvas Linking Tool

CVE-2021-25006

MOLIE <= 0.5 - Reflected Cross-Site Scripting

The MOLIE WordPress plugin through 0.5 does not escape the course_id parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Molie Instructure Canvas Linking Tool Project

Products

Molie Instructure Canvas Linking Tool

Page 1 of 1.