DRUPAL-CONTRIB-2021-018
This project is related to Opigno LMS distribution. It implements the learning path, that combines together in a very flexible way the differents steps of a training in Opigno LMS.
The module does not set X-Frame-Options and blocks ability of other modules (e.g Security Kit) to add them, leaving it vulnerable to Clickjacking.
What each source reports
OSV No score
This project is related to Opigno LMS distribution. It implements the learning path, that combines together in a very flexible way the differents steps of a training in Opigno LMS.
The module does not set X-Frame-Options and blocks ability of other modules (e.g Security Kit) to add them, leaving it vulnerable to Clickjacking.
- Record
DRUPAL-CONTRIB-2021-018- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
drupal/opigno_learning_pathPackagist:https://packages.drupal.org/8 |
before 1.11.0 | 1.11.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
DRUPAL-CONTRIB-2021-018 is a vulnerability with no CVSS score yet in drupal/opigno_learning_path, published June 23, 2021. No source lists public exploit code. Fixed in drupal/opigno_learning_path 1.11.0.