Fortunescripts Lynda Clone — known CVE vulnerabilities

Every CVE whose affected-product data names Fortunescripts Lynda Clone, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2017-17903 — CVSS 8.8 (high): FS Lynda Clone has CSRF via user/edit_profile, as demonstrated by adding content to the user panel.
• CVE-2017-17904 — CVSS 5.4 (medium): FS Lynda Clone has XSS via the keywords parameter to tutorial/ or the edit_profile_first_name parameter to user/edit_profile.