Threats tagged 'ghsa-782f-4vq3-mp5h'

The Academy LMS WordPress plugin (AI Course Builder, Quizzes, Certificates & eLearning) contains a directory traversal vulnerability in all versions up to and including 4.0.1. Authenticated users with contributor-level access or higher can exploit the 'id' parameter to read arbitrary .html files on the server. The plugin appends a '.html' extension to the supplied path, preventing access to files with other extensions. The contents of the targeted .html files are returned in the REST API JSON response.