Vulnerabilities > CVE-2021-25006 - Unspecified vulnerability in Molie Instructure Canvas Linking Tool Project Molie Instructure Canvas Linking Tool 0.5
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
LOW Integrity impact
LOW Availability impact
NONE Summary
The MOLIE WordPress plugin through 0.5 does not escape the course_id parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |