{"id":"CVE-2024-3931","state":"PUBLISHED","title":"Totara LMS User Selector check.php cross site scripting","description":"A vulnerability was found in Totara LMS up to 18.7. It has been rated as problematic. Affected by this issue is some unknown functionality of the file admin/roles/check.php of the component User Selector. The manipulation of the argument ID Number leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 13.46, 14.38, 15.33, 16.27, 17.21 and 18.8 is able to address this issue. It is recommended to upgrade the affected component.","publishedAt":"2024-04-18T00:00:04.983Z","updatedAt":"2025-06-10T05:14:33.471Z","severity":{"score":5.1,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["Totara LMS"],"affected":[{"vendor":"Totara","product":"LMS","versions":[{"version":"13.0","status":"affected"},{"version":"13.1","status":"affected"},{"version":"13.2","status":"affected"},{"version":"13.3","status":"affected"},{"version":"13.4","status":"affected"},{"version":"13.5","status":"affected"},{"version":"13.6","status":"affected"},{"version":"13.7","status":"affected"},{"version":"13.8","status":"affected"},{"version":"13.9","status":"affected"},{"version":"13.10","status":"affected"},{"version":"13.11","status":"affected"},{"version":"13.12","status":"affected"},{"version":"13.13","status":"affected"},{"version":"13.14","status":"affected"},{"version":"13.15","status":"affected"},{"version":"13.16","status":"affected"},{"version":"13.17","status":"affected"},{"version":"13.18","status":"affected"},{"version":"13.19","status":"affected"},{"version":"13.20","status":"affected"},{"version":"13.21","status":"affected"},{"version":"13.22","status":"affected"},{"version":"13.23","status":"affected"},{"version":"13.24","status":"affected"},{"version":"13.25","status":"affected"},{"version":"13.26","status":"affected"},{"version":"13.27","status":"affected"},{"version":"13.28","status":"affected"},{"version":"13.29","status":"affected"},{"version":"13.30","status":"affected"},{"version":"13.31","status":"affected"},{"version":"13.32","status":"affected"},{"version":"13.33","status":"affected"},{"version":"13.34","status":"affected"},{"version":"13.35","status":"affected"},{"version":"13.36","status":"affected"},{"version":"13.37","status":"affected"},{"version":"13.38","status":"affected"},{"version":"13.39","status":"affected"},{"version":"13.40","status":"affected"},{"version":"13.41","status":"affected"},{"version":"13.42","status":"affected"},{"version":"13.43","status":"affected"},{"version":"13.44","status":"affected"},{"version":"13.45","status":"affected"},{"version":"14.0","status":"affected"},{"version":"14.1","status":"affected"},{"version":"14.2","status":"affected"},{"version":"14.3","status":"affected"},{"version":"14.4","status":"affected"},{"version":"14.5","status":"affected"},{"version":"14.6","status":"affected"},{"version":"14.7","status":"affected"},{"version":"14.8","status":"affected"},{"version":"14.9","status":"affected"},{"version":"14.10","status":"affected"},{"version":"14.11","status":"affected"},{"version":"14.12","status":"affected"},{"version":"14.13","status":"affected"},{"version":"14.14","status":"affected"},{"version":"14.15","status":"affected"},{"version":"14.16","status":"affected"},{"version":"14.17","status":"affected"},{"version":"14.18","status":"affected"},{"version":"14.19","status":"affected"},{"version":"14.20","status":"affected"},{"version":"14.21","status":"affected"},{"version":"14.22","status":"affected"},{"version":"14.23","status":"affected"},{"version":"14.24","status":"affected"},{"version":"14.25","status":"affected"},{"version":"14.26","status":"affected"},{"version":"14.27","status":"affected"},{"version":"14.28","status":"affected"},{"version":"14.29","status":"affected"},{"version":"14.30","status":"affected"},{"version":"14.31","status":"affected"},{"version":"14.32","status":"affected"},{"version":"14.33","status":"affected"},{"version":"14.34","status":"affected"},{"version":"14.35","status":"affected"},{"version":"14.36","status":"affected"},{"version":"14.37","status":"affected"},{"version":"15.0","status":"affected"},{"version":"15.1","status":"affected"},{"version":"15.2","status":"affected"},{"version":"15.3","status":"affected"},{"version":"15.4","status":"affected"},{"version":"15.5","status":"affected"},{"version":"15.6","status":"affected"},{"version":"15.7","status":"affected"},{"version":"15.8","status":"affected"},{"version":"15.9","status":"affected"},{"version":"15.10","status":"affected"},{"version":"15.11","status":"affected"},{"version":"15.12","status":"affected"},{"version":"15.13","status":"affected"},{"version":"15.14","status":"affected"},{"version":"15.15","status":"affected"},{"version":"15.16","status":"affected"},{"version":"15.17","status":"affected"},{"version":"15.18","status":"affected"},{"version":"15.19","status":"affected"},{"version":"15.20","status":"affected"},{"version":"15.21","status":"affected"},{"version":"15.22","status":"affected"},{"version":"15.23","status":"affected"},{"version":"15.24","status":"affected"},{"version":"15.25","status":"affected"},{"version":"15.26","status":"affected"},{"version":"15.27","status":"affected"},{"version":"15.28","status":"affected"},{"version":"15.29","status":"affected"},{"version":"15.30","status":"affected"},{"version":"15.31","status":"affected"},{"version":"15.32","status":"affected"},{"version":"16.0","status":"affected"},{"version":"16.1","status":"affected"},{"version":"16.2","status":"affected"},{"version":"16.3","status":"affected"},{"version":"16.4","status":"affected"},{"version":"16.5","status":"affected"},{"version":"16.6","status":"affected"},{"version":"16.7","status":"affected"},{"version":"16.8","status":"affected"},{"version":"16.9","status":"affected"},{"version":"16.10","status":"affected"},{"version":"16.11","status":"affected"},{"version":"16.12","status":"affected"},{"version":"16.13","status":"affected"},{"version":"16.14","status":"affected"},{"version":"16.15","status":"affected"},{"version":"16.16","status":"affected"},{"version":"16.17","status":"affected"},{"version":"16.18","status":"affected"},{"version":"16.19","status":"affected"},{"version":"16.20","status":"affected"},{"version":"16.21","status":"affected"},{"version":"16.22","status":"affected"},{"version":"16.23","status":"affected"},{"version":"16.24","status":"affected"},{"version":"16.25","status":"affected"},{"version":"16.26","status":"affected"},{"version":"17.0","status":"affected"},{"version":"17.1","status":"affected"},{"version":"17.2","status":"affected"},{"version":"17.3","status":"affected"},{"version":"17.4","status":"affected"},{"version":"17.5","status":"affected"},{"version":"17.6","status":"affected"},{"version":"17.7","status":"affected"},{"version":"17.8","status":"affected"},{"version":"17.9","status":"affected"},{"version":"17.10","status":"affected"},{"version":"17.11","status":"affected"},{"version":"17.12","status":"affected"},{"version":"17.13","status":"affected"},{"version":"17.14","status":"affected"},{"version":"17.15","status":"affected"},{"version":"17.16","status":"affected"},{"version":"17.17","status":"affected"},{"version":"17.18","status":"affected"},{"version":"17.19","status":"affected"},{"version":"17.20","status":"affected"},{"version":"18.0","status":"affected"},{"version":"18.1","status":"affected"},{"version":"18.2","status":"affected"},{"version":"18.3","status":"affected"},{"version":"18.4","status":"affected"},{"version":"18.5","status":"affected"},{"version":"18.6","status":"affected"},{"version":"18.7","status":"affected"}],"modules":["User Selector"]}],"references":["https://vuldb.com/?id.261368","https://vuldb.com/?ctiid.261368","https://totara.community/mod/forum/discuss.php?d=27644"],"weaknesses":["CWE-79","CWE-94"],"ingestedAt":"2026-10-29T20:07:39.287Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/3xxx/CVE-2024-3931.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-3931","state":"PUBLISHED","datePublished":"2024-04-18T00:00:04.983Z","dateUpdated":"2025-06-10T05:14:33.471Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2024-04-17T16:57:36.717Z"},"containers":{"cna":{"title":"Totara LMS User Selector check.php cross site scripting","descriptions":[{"lang":"en","value":"A vulnerability was found in Totara LMS up to 18.7. It has been rated as problematic. Affected by this issue is some unknown functionality of the file admin/roles/check.php of the component User Selector. The manipulation of the argument ID Number leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 13.46, 14.38, 15.33, 16.27, 17.21 and 18.8 is able to address this issue. It is recommended to upgrade the affected component."},{"lang":"de","value":"Eine problematische Schwachstelle wurde in Totara LMS bis 18.7 ausgemacht. Betroffen davon ist ein unbekannter Prozess der Datei admin/roles/check.php der Komponente User Selector. Durch Manipulieren des Arguments ID Number mit unbekannten Daten kann eine cross site scripting-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung. Ein Aktualisieren auf die Version 13.46, 14.38, 15.33, 16.27, 17.21 and 18.8 vermag dieses Problem zu lösen. Als bestmögliche Massnahme wird das Einspielen eines Upgrades empfohlen."}],"affected":[{"vendor":"Totara","product":"LMS","versions":[{"version":"13.0","status":"affected"},{"version":"13.1","status":"affected"},{"version":"13.2","status":"affected"},{"version":"13.3","status":"affected"},{"version":"13.4","status":"affected"},{"version":"13.5","status":"affected"},{"version":"13.6","status":"affected"},{"version":"13.7","status":"affected"},{"version":"13.8","status":"affected"},{"version":"13.9","status":"affected"},{"version":"13.10","status":"affected"},{"version":"13.11","status":"affected"},{"version":"13.12","status":"affected"},{"version":"13.13","status":"affected"},{"version":"13.14","status":"affected"},{"version":"13.15","status":"affected"},{"version":"13.16","status":"affected"},{"version":"13.17","status":"affected"},{"version":"13.18","status":"affected"},{"version":"13.19","status":"affected"},{"version":"13.20","status":"affected"},{"version":"13.21","status":"affected"},{"version":"13.22","status":"affected"},{"version":"13.23","status":"affected"},{"version":"13.24","status":"affected"},{"version":"13.25","status":"affected"},{"version":"13.26","status":"affected"},{"version":"13.27","status":"affected"},{"version":"13.28","status":"affected"},{"version":"13.29","status":"affected"},{"version":"13.30","status":"affected"},{"version":"13.31","status":"affected"},{"version":"13.32","status":"affected"},{"version":"13.33","status":"affected"},{"version":"13.34","status":"affected"},{"version":"13.35","status":"affected"},{"version":"13.36","status":"affected"},{"version":"13.37","status":"affected"},{"version":"13.38","status":"affected"},{"version":"13.39","status":"affected"},{"version":"13.40","status":"affected"},{"version":"13.41","status":"affected"},{"version":"13.42","status":"affected"},{"version":"13.43","status":"affected"},{"version":"13.44","status":"affected"},{"version":"13.45","status":"affected"},{"version":"14.0","status":"affected"},{"version":"14.1","status":"affected"},{"version":"14.2","status":"affected"},{"version":"14.3","status":"affected"},{"version":"14.4","status":"affected"},{"version":"14.5","status":"affected"},{"version":"14.6","status":"affected"},{"version":"14.7","status":"affected"},{"version":"14.8","status":"affected"},{"version":"14.9","status":"affected"},{"version":"14.10","status":"affected"},{"version":"14.11","status":"affected"},{"version":"14.12","status":"affected"},{"version":"14.13","status":"affected"},{"version":"14.14","status":"affected"},{"version":"14.15","status":"affected"},{"version":"14.16","status":"affected"},{"version":"14.17","status":"affected"},{"version":"14.18","status":"affected"},{"version":"14.19","status":"affected"},{"version":"14.20","status":"affected"},{"version":"14.21","status":"affected"},{"version":"14.22","status":"affected"},{"version":"14.23","status":"affected"},{"version":"14.24","status":"affected"},{"version":"14.25","status":"affected"},{"version":"14.26","status":"affected"},{"version":"14.27","status":"affected"},{"version":"14.28","status":"affected"},{"version":"14.29","status":"affected"},{"version":"14.30","status":"affected"},{"version":"14.31","status":"affected"},{"version":"14.32","status":"affected"},{"version":"14.33","status":"affected"},{"version":"14.34","status":"affected"},{"version":"14.35","status":"affected"},{"version":"14.36","status":"affected"},{"version":"14.37","status":"affected"},{"version":"15.0","status":"affected"},{"version":"15.1","status":"affected"},{"version":"15.2","status":"affected"},{"version":"15.3","status":"affected"},{"version":"15.4","status":"affected"},{"version":"15.5","status":"affected"},{"version":"15.6","status":"affected"},{"version":"15.7","status":"affected"},{"version":"15.8","status":"affected"},{"version":"15.9","status":"affected"},{"version":"15.10","status":"affected"},{"version":"15.11","status":"affected"},{"version":"15.12","status":"affected"},{"version":"15.13","status":"affected"},{"version":"15.14","status":"affected"},{"version":"15.15","status":"affected"},{"version":"15.16","status":"affected"},{"version":"15.17","status":"affected"},{"version":"15.18","status":"affected"},{"version":"15.19","status":"affected"},{"version":"15.20","status":"affected"},{"version":"15.21","status":"affected"},{"version":"15.22","status":"affected"},{"version":"15.23","status":"affected"},{"version":"15.24","status":"affected"},{"version":"15.25","status":"affected"},{"version":"15.26","status":"affected"},{"version":"15.27","status":"affected"},{"version":"15.28","status":"affected"},{"version":"15.29","status":"affected"},{"version":"15.30","status":"affected"},{"version":"15.31","status":"affected"},{"version":"15.32","status":"affected"},{"version":"16.0","status":"affected"},{"version":"16.1","status":"affected"},{"version":"16.2","status":"affected"},{"version":"16.3","status":"affected"},{"version":"16.4","status":"affected"},{"version":"16.5","status":"affected"},{"version":"16.6","status":"affected"},{"version":"16.7","status":"affected"},{"version":"16.8","status":"affected"},{"version":"16.9","status":"affected"},{"version":"16.10","status":"affected"},{"version":"16.11","status":"affected"},{"version":"16.12","status":"affected"},{"version":"16.13","status":"affected"},{"version":"16.14","status":"affected"},{"version":"16.15","status":"affected"},{"version":"16.16","status":"affected"},{"version":"16.17","status":"affected"},{"version":"16.18","status":"affected"},{"version":"16.19","status":"affected"},{"version":"16.20","status":"affected"},{"version":"16.21","status":"affected"},{"version":"16.22","status":"affected"},{"version":"16.23","status":"affected"},{"version":"16.24","status":"affected"},{"version":"16.25","status":"affected"},{"version":"16.26","status":"affected"},{"version":"17.0","status":"affected"},{"version":"17.1","status":"affected"},{"version":"17.2","status":"affected"},{"version":"17.3","status":"affected"},{"version":"17.4","status":"affected"},{"version":"17.5","status":"affected"},{"version":"17.6","status":"affected"},{"version":"17.7","status":"affected"},{"version":"17.8","status":"affected"},{"version":"17.9","status":"affected"},{"version":"17.10","status":"affected"},{"version":"17.11","status":"affected"},{"version":"17.12","status":"affected"},{"version":"17.13","status":"affected"},{"version":"17.14","status":"affected"},{"version":"17.15","status":"affected"},{"version":"17.16","status":"affected"},{"version":"17.17","status":"affected"},{"version":"17.18","status":"affected"},{"version":"17.19","status":"affected"},{"version":"17.20","status":"affected"},{"version":"18.0","status":"affected"},{"version":"18.1","status":"affected"},{"version":"18.2","status":"affected"},{"version":"18.3","status":"affected"},{"version":"18.4","status":"affected"},{"version":"18.5","status":"affected"},{"version":"18.6","status":"affected"},{"version":"18.7","status":"affected"}],"modules":["User Selector"]}],"references":[{"url":"https://vuldb.com/?id.261368","name":"VDB-261368 | Totara LMS User Selector check.php cross site scripting","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/?ctiid.261368","name":"VDB-261368 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://totara.community/mod/forum/discuss.php?d=27644","tags":["related"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.1,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":3.5,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C","baseSeverity":"LOW"}},{"cvssV3_0":{"version":"3.0","baseScore":3.5,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C","baseSeverity":"LOW"}},{"cvssV2_0":{"version":"2.0","baseScore":4,"vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:OF/RC:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-79","type":"CWE","lang":"en","description":"Cross Site Scripting"}]},{"descriptions":[{"cweId":"CWE-94","type":"CWE","lang":"en","description":"Code Injection"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2025-06-10T05:14:33.471Z"},"timeline":[{"time":"2024-04-17T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2024-04-17T00:00:00.000Z","lang":"en","value":"CVE reserved"},{"time":"2024-04-17T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2025-06-10T07:19:10.000Z","lang":"en","value":"VulDB entry last update"}]},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"totara","product":"enterprise_lms","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThanOrEqual":"18.0.1 Build 20231128.01","versionType":"custom"}],"cpes":["cpe:2.3:a:totara:enterprise_lms:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-04-22T19:20:06.233081Z","id":"CVE-2024-3931","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-06T19:44:53.040Z"}},{"title":"CVE Program Container","references":[{"url":"https://vuldb.com/?id.261368","name":"VDB-261368 | Totara LMS Profile check.php cross site scripting","tags":["vdb-entry","technical-description","x_transferred"]},{"url":"https://vuldb.com/?ctiid.261368","name":"VDB-261368 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T20:26:57.145Z"}}]}}}