Vendor

    Erudika

    15 known vulnerabilities in products by Erudika, 0 of them actively exploited (CISA KEV).

    Key figures

    15

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Erudika
    HighCVE-2024-50334

    Semicolon Path Injection on API /api;/config

    		5.3
    CriticalCVE-2022-1543

    Improper handling of Length parameter in erudika/scoold

    		9.3
    CriticalCVE-2022-1782

    Cross-site Scripting (XSS) - Generic in erudika/para

    		9.4
    CriticalCVE-2022-1848

    Business Logic Errors in erudika/para

    		9.0
    MediumCVE-2026-54676

    Scoold: GET /api/posts/{id}/answers leaks private-space replies when personal API tokens are enabled

    		6.5
    MediumCVE-2026-54677

    Erudika Scoold: Missing Authorization

    		6.5
    MediumCVE-2026-57183

    Erudika Scoold: Improper Authentication

    		6.1
    MediumCVE-2026-55840

    Scoold: Open Redirect in getBackToUrl() allows phishing via domain-prefix startsWith bypass

    		5.4
    MediumCVE-2026-55842

    Erudika Scoold: Permissive Cross-domain Security Policy with Untrusted Domains

    		5.4
    MediumCVE-2026-42176

    Erudika Scoold: Missing Authentication for Critical Function

    		6.7
    MediumCVE-2026-34832

    Scoold: Cross-Account Feedback Deletion (IDOR)

    		6.5
    MediumCVE-2026-39354

    Erudika Scoold: Authorization Bypass Through User-Controlled Key

    		6.5
    MediumCVE-2021-46372

    Erudika Scoold: Cross-Site Scripting (XSS)

    		5.4
    MediumCVE-2025-48955

    Para Server Logs Sensitive Information

    		6.2
    MediumCVE-2025-49009

    Para Inserts Sensitive Information into Log File for Facebook authentication

    		6.2

    Products

    Products by Erudika
    Erudika Scoold110
    Para40