Revan Arifio

Name of the Vulnerable Software and Affected Versions: Tutor LMS versions n/d through 3.4.0 Description: The issue is related to an improper neutralization of script-related HTML tags in a web page, which can lead to a basic Cross-Site Scripting (XSS) attack. This allows an attacker to inject malicious scripts into a webpage, potentially affecting users who visit the page. Recommendations: For versions prior to 3.4.0, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to an Incorrect Privilege Assignment, which allows Privilege Escalation in the wpForo Forum.

The issue is related to an Incorrect Privilege Assignment vulnerability, which allows Privilege Escalation in the Dimitri Grassi Salon booking system.

The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels.

The issue is related to a Missing Authorization vulnerability in Pixelite Events Manager, which allows exploitation due to incorrectly configured access control security levels.

The issue affects Amelia due to an Authorization Bypass Through User-Controlled Key vulnerability, which exploits incorrectly configured access control security levels.

A Missing Authorization issue in WP Chill Strong Testimonials allows accessing functionality not properly constrained by ACLs.

The issue is related to an Authorization Bypass Through User-Controlled Key, which can be exploited due to incorrectly configured access control security levels.

The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels due to broken access control. This can be exploited in the Yet Another Stars Rating plugin for WordPress.

The issue is related to a Missing Authorization vulnerability in the Contact Form, allowing exploitation of incorrectly configured access control security levels.

The issue is related to a Missing Authorization vulnerability in ProfilePress Membership Team, allowing exploitation of incorrectly configured access control security levels.

The issue is related to a Missing Authorization vulnerability in Metform Elementor Contact Form Builder, which allows exploiting incorrectly configured access control security levels.

The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. This vulnerability can be exploited due to missing authorization in the Premio All-in-one Floating Contact Form – My Sticky Elements plugin.

The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels.

The issue is related to a Missing Authorization vulnerability in UserFeedback Team User Feedback, which allows exploiting incorrectly configured access control security levels.

The issue is related to a Missing Authorization vulnerability in WPEverest Everest Forms.

The issue is related to a Missing Authorization vulnerability in ExpressTech Quiz And Survey Master.

The issue is related to a Missing Authorization vulnerability in Happyforms.

The issue is related to Improper Privilege Management, which allows Privilege Escalation.

The issue is related to Improper Privilege Management, allowing Privilege Escalation in Repute Infosystems ARMember.