PatchTheCVE: ideacohttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2022-31787: IdeaTMS 2022 is vulnerable to SQL Injection via the PATH_INFOhttps://patchthecve.com/cve/CVE-2022-31787.htmlhttps://patchthecve.com/cve/CVE-2022-31787.htmlWed, 17 Jun 2026 04:46:18 +0000CRITICAL 9.8: IdeaTMS 2022 is vulnerable to SQL Injection via the PATH_INFOCVE-2022-31786: IdeaLMS 2022 allows reflected Cross Site Scripting (XSS) via the IdeaLMS/Class/Assessment/ PATH_INFO.https://patchthecve.com/cve/CVE-2022-31786.htmlhttps://patchthecve.com/cve/CVE-2022-31786.htmlWed, 17 Jun 2026 04:46:18 +0000MEDIUM 6.1: IdeaLMS 2022 allows reflected Cross Site Scripting (XSS) via the IdeaLMS/Class/Assessment/ PATH_INFO.CVE-2022-31788: IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathttps://patchthecve.com/cve/CVE-2022-31788.htmlhttps://patchthecve.com/cve/CVE-2022-31788.htmlWed, 17 Jun 2026 04:46:18 +0000CRITICAL 9.8: IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname.