CVE-2024-25973

The Frentix GmbH OpenOlat LMS is affected by multiple stored Cross-Site Scripting (XSS) vulnerabilities. An attacker with rights to create or edit groups can create a course with a name that contains an XSS payload. Furthermore, attackers with the permissions to create or rename a catalog (sub-category) can enter unfiltered input in the name field. In addition, attackers who are allowed to create curriculums can also enter unfiltered input in the name field. This allows an attacker to execute stored JavaScript code with the permissions of the victim in the context of the user's browser.

• CWE-20
• CWE-79

• http://seclists.org/fulldisclosure/2024/Feb/23Exploit, Mailing List
• https://r.sec-consult.com/openolatExploit, Third Party Advisory
• http://seclists.org/fulldisclosure/2024/Feb/23Exploit, Mailing List
• https://r.sec-consult.com/openolatExploit, Third Party Advisory

Published

Feb 20, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-25968Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contain…7.5
• CVE-2024-25969Dell PowerScale OneFS versions 8.2.x through 9.7.0.1 contain…5.5
• CVE-2024-2597Vulnerability in AMSS++ version 4.31, which does not suffici…6.1
• CVE-2024-25970Dell PowerScale OneFS versions 8.2.x through 9.7.0.1 contain…6.5
• CVE-2024-25971Dell PowerProtect Data Manager, version 19.15, contains an X…6.5
• CVE-2024-25972Initialization of a resource with an insecure default vulner…8.3
• CVE-2024-25974The Frentix GmbH OpenOlat LMS is affected by stored a Cross-…5.4
• CVE-2024-25975The application implements an up- and downvote function whic…6.5
• CVE-2024-25976When LDAP authentication is activated in the configuration i…6.1
• CVE-2024-25977The application does not change the session token when using…7.3
• CVE-2024-25978Insufficient file size checks resulted in a denial of servic…7.5
• CVE-2024-25979The URL parameters accepted by forum search were not limited…5.3