Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2024-11-21
CVE-2022-2379 - Easy Student Results Plugin
The Easy Student Results WordPress plugin through 2.2.8 lacks authorisation in its REST API, allowing unauthenticated users to retrieve information related to the courses, exams, departments as well as student's grades and PII such as email address, physical address, phone number etc
PLUGIN
Easy Student Results
CVE-2022-2379
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-2378 - Easy Student Results Plugin
The Easy Student Results WordPress plugin through 2.2.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting
PLUGIN
Easy Student Results
CVE-2022-2378
Risk Score