Security Breach In LMS - Question | JoomShaper

is live, now with multi-currency selling.

Learn More
Back to the questions

Security Breach In LMS

Yann TASSY

Yann TASSY

Extension 2 years ago

Hello, I've found a new security problem on my site. If I type this URL without being logged in I can see the list of people who have a Certificate in LMS. This exposes my customers' personal data.

To test: https://www.yanntassy.fr/?option=com_splms&view=certificates

I only put 3 to test.

Thanks for your help Yann

0
Website
https://www.yanntassy.fr
1 Answers
Order by
Oldest Newest Votes
Toufiq
Toufiq
Accepted Answer
Senior Staff 2 years ago #166455

Hi there,

Thank you so much for your investigation. I will share it to our developer team. We will try to fix it as soon as possible.

Best regards,

Toufiqur Rahman (Team Lead, Support)

0