CVE-2021-25006: Molie Instructure Canvas Linking Tool Project Molie Instructure Canvas Linking Tool

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

The MOLIE WordPress plugin through 0.5 does not escape the course_id parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue

Affected products

• Molie Instructure Canvas Linking Tool Project Molie Instructure Canvas Linking Tool: up to and including 0.5

Published 2022-03-14. Last modified 2026-06-17.