{"id":"DRUPAL-CONTRIB-2021-018","aliases":[],"title":"DRUPAL-CONTRIB-2021-018","description":"This project is related to Opigno LMS distribution. It implements the learning path, that combines together in a very flexible way the differents steps of a training in Opigno LMS.\n\nThe module does not set X-Frame-Options and blocks ability of other modules (e.g [Security Kit](https://www.drupal.org/project/seckit)) to add them, leaving it vulnerable to Clickjacking.","severity":"unknown","score":null,"published":"2021-06-23T16:47:59.000Z","modified":"2026-09-10T03:45:50.280Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist:https://packages.drupal.org/8","name":"drupal/opigno_learning_path","ranges":[{"events":[{"introduced":"0"},{"fixed":"1.11.0"}],"type":"ECOSYSTEM","database_specific":{"constraint":"<1.11.0"}}],"versions":[],"fixed":["1.11.0"]}],"references":["https://www.drupal.org/sa-contrib-2021-018"],"sources":[{"name":"OSV","id":"DRUPAL-CONTRIB-2021-018","modified":"2026-09-10T03:45:50.280022849Z","url":"https://osv.dev/vulnerability/DRUPAL-CONTRIB-2021-018"}],"assessments":[]}