Security Breach in LMS - Forum | JoomShaper
Staff replied Extensions

Security Breach in LMS

Asked by Yann TASSY 2 years ago Last activity 2 years ago

Hello,
I've found a new security problem on my site.
If I type this URL without being logged in I can see the list of people who have a Certificate in LMS. This exposes my customers' personal data.

To test: https://www.yanntassy.fr/?option=com_splms&view=certificates

I only put 3 to test.

Thanks for your help
Yann

1 reply

Toufiq Senior Staff
2 years ago

Hi there,

Thank you so much for your investigation. I will share it to our developer team. We will try to fix it as soon as possible.

Best regards,

Toufiqur Rahman (Team Lead, Support)

Log in to reply.