{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2024-3931",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2024-3931",
    "idYear": 2024,
    "status": "PUBLISHED",
    "publishedAt": "2024-04-18T00:00:04.983Z",
    "updatedAt": "2025-06-10T05:14:33.471Z",
    "importedAt": "2026-10-24T01:57:16.009Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "Totara LMS User Selector check.php cross site scripting",
      "summary": "A vulnerability was found in Totara LMS up to 18.7. It has been rated as problematic. Affected by this issue is some unknown functionality of the file admin/roles/check.php of the component User Selector. The manipulation of the argument ID Number leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 13.46, 14.38, 15.33, 16.27, 17.21 and 18.8 is able to address this issue. It is recommended to upgrade the affected component.",
      "affected": [
        {
          "vendor": "Totara",
          "product": "LMS",
          "versions": [
            {
              "version": "13.0",
              "status": "affected"
            },
            {
              "version": "13.1",
              "status": "affected"
            },
            {
              "version": "13.2",
              "status": "affected"
            },
            {
              "version": "13.3",
              "status": "affected"
            },
            {
              "version": "13.4",
              "status": "affected"
            },
            {
              "version": "13.5",
              "status": "affected"
            },
            {
              "version": "13.6",
              "status": "affected"
            },
            {
              "version": "13.7",
              "status": "affected"
            },
            {
              "version": "13.8",
              "status": "affected"
            },
            {
              "version": "13.9",
              "status": "affected"
            },
            {
              "version": "13.10",
              "status": "affected"
            },
            {
              "version": "13.11",
              "status": "affected"
            },
            {
              "version": "13.12",
              "status": "affected"
            },
            {
              "version": "13.13",
              "status": "affected"
            },
            {
              "version": "13.14",
              "status": "affected"
            },
            {
              "version": "13.15",
              "status": "affected"
            },
            {
              "version": "13.16",
              "status": "affected"
            },
            {
              "version": "13.17",
              "status": "affected"
            },
            {
              "version": "13.18",
              "status": "affected"
            },
            {
              "version": "13.19",
              "status": "affected"
            },
            {
              "version": "13.20",
              "status": "affected"
            },
            {
              "version": "13.21",
              "status": "affected"
            },
            {
              "version": "13.22",
              "status": "affected"
            },
            {
              "version": "13.23",
              "status": "affected"
            },
            {
              "version": "13.24",
              "status": "affected"
            },
            {
              "version": "13.25",
              "status": "affected"
            },
            {
              "version": "13.26",
              "status": "affected"
            },
            {
              "version": "13.27",
              "status": "affected"
            },
            {
              "version": "13.28",
              "status": "affected"
            },
            {
              "version": "13.29",
              "status": "affected"
            },
            {
              "version": "13.30",
              "status": "affected"
            },
            {
              "version": "13.31",
              "status": "affected"
            },
            {
              "version": "13.32",
              "status": "affected"
            },
            {
              "version": "13.33",
              "status": "affected"
            },
            {
              "version": "13.34",
              "status": "affected"
            },
            {
              "version": "13.35",
              "status": "affected"
            },
            {
              "version": "13.36",
              "status": "affected"
            },
            {
              "version": "13.37",
              "status": "affected"
            },
            {
              "version": "13.38",
              "status": "affected"
            },
            {
              "version": "13.39",
              "status": "affected"
            },
            {
              "version": "13.40",
              "status": "affected"
            },
            {
              "version": "13.41",
              "status": "affected"
            },
            {
              "version": "13.42",
              "status": "affected"
            },
            {
              "version": "13.43",
              "status": "affected"
            },
            {
              "version": "13.44",
              "status": "affected"
            },
            {
              "version": "13.45",
              "status": "affected"
            },
            {
              "version": "14.0",
              "status": "affected"
            },
            {
              "version": "14.1",
              "status": "affected"
            },
            {
              "version": "14.2",
              "status": "affected"
            },
            {
              "version": "14.3",
              "status": "affected"
            },
            {
              "version": "14.4",
              "status": "affected"
            },
            {
              "version": "14.5",
              "status": "affected"
            },
            {
              "version": "14.6",
              "status": "affected"
            },
            {
              "version": "14.7",
              "status": "affected"
            },
            {
              "version": "14.8",
              "status": "affected"
            },
            {
              "version": "14.9",
              "status": "affected"
            },
            {
              "version": "14.10",
              "status": "affected"
            },
            {
              "version": "14.11",
              "status": "affected"
            },
            {
              "version": "14.12",
              "status": "affected"
            },
            {
              "version": "14.13",
              "status": "affected"
            },
            {
              "version": "14.14",
              "status": "affected"
            },
            {
              "version": "14.15",
              "status": "affected"
            },
            {
              "version": "14.16",
              "status": "affected"
            },
            {
              "version": "14.17",
              "status": "affected"
            },
            {
              "version": "14.18",
              "status": "affected"
            },
            {
              "version": "14.19",
              "status": "affected"
            },
            {
              "version": "14.20",
              "status": "affected"
            },
            {
              "version": "14.21",
              "status": "affected"
            },
            {
              "version": "14.22",
              "status": "affected"
            },
            {
              "version": "14.23",
              "status": "affected"
            },
            {
              "version": "14.24",
              "status": "affected"
            },
            {
              "version": "14.25",
              "status": "affected"
            },
            {
              "version": "14.26",
              "status": "affected"
            },
            {
              "version": "14.27",
              "status": "affected"
            },
            {
              "version": "14.28",
              "status": "affected"
            },
            {
              "version": "14.29",
              "status": "affected"
            },
            {
              "version": "14.30",
              "status": "affected"
            },
            {
              "version": "14.31",
              "status": "affected"
            },
            {
              "version": "14.32",
              "status": "affected"
            },
            {
              "version": "14.33",
              "status": "affected"
            },
            {
              "version": "14.34",
              "status": "affected"
            },
            {
              "version": "14.35",
              "status": "affected"
            },
            {
              "version": "14.36",
              "status": "affected"
            },
            {
              "version": "14.37",
              "status": "affected"
            },
            {
              "version": "15.0",
              "status": "affected"
            },
            {
              "version": "15.1",
              "status": "affected"
            },
            {
              "version": "15.2",
              "status": "affected"
            },
            {
              "version": "15.3",
              "status": "affected"
            },
            {
              "version": "15.4",
              "status": "affected"
            },
            {
              "version": "15.5",
              "status": "affected"
            },
            {
              "version": "15.6",
              "status": "affected"
            },
            {
              "version": "15.7",
              "status": "affected"
            },
            {
              "version": "15.8",
              "status": "affected"
            },
            {
              "version": "15.9",
              "status": "affected"
            },
            {
              "version": "15.10",
              "status": "affected"
            },
            {
              "version": "15.11",
              "status": "affected"
            },
            {
              "version": "15.12",
              "status": "affected"
            },
            {
              "version": "15.13",
              "status": "affected"
            },
            {
              "version": "15.14",
              "status": "affected"
            },
            {
              "version": "15.15",
              "status": "affected"
            },
            {
              "version": "15.16",
              "status": "affected"
            },
            {
              "version": "15.17",
              "status": "affected"
            },
            {
              "version": "15.18",
              "status": "affected"
            },
            {
              "version": "15.19",
              "status": "affected"
            },
            {
              "version": "15.20",
              "status": "affected"
            },
            {
              "version": "15.21",
              "status": "affected"
            },
            {
              "version": "15.22",
              "status": "affected"
            },
            {
              "version": "15.23",
              "status": "affected"
            },
            {
              "version": "15.24",
              "status": "affected"
            },
            {
              "version": "15.25",
              "status": "affected"
            },
            {
              "version": "15.26",
              "status": "affected"
            },
            {
              "version": "15.27",
              "status": "affected"
            },
            {
              "version": "15.28",
              "status": "affected"
            },
            {
              "version": "15.29",
              "status": "affected"
            },
            {
              "version": "15.30",
              "status": "affected"
            },
            {
              "version": "15.31",
              "status": "affected"
            },
            {
              "version": "15.32",
              "status": "affected"
            },
            {
              "version": "16.0",
              "status": "affected"
            },
            {
              "version": "16.1",
              "status": "affected"
            },
            {
              "version": "16.2",
              "status": "affected"
            },
            {
              "version": "16.3",
              "status": "affected"
            },
            {
              "version": "16.4",
              "status": "affected"
            },
            {
              "version": "16.5",
              "status": "affected"
            },
            {
              "version": "16.6",
              "status": "affected"
            },
            {
              "version": "16.7",
              "status": "affected"
            },
            {
              "version": "16.8",
              "status": "affected"
            },
            {
              "version": "16.9",
              "status": "affected"
            },
            {
              "version": "16.10",
              "status": "affected"
            },
            {
              "version": "16.11",
              "status": "affected"
            },
            {
              "version": "16.12",
              "status": "affected"
            },
            {
              "version": "16.13",
              "status": "affected"
            },
            {
              "version": "16.14",
              "status": "affected"
            },
            {
              "version": "16.15",
              "status": "affected"
            },
            {
              "version": "16.16",
              "status": "affected"
            },
            {
              "version": "16.17",
              "status": "affected"
            },
            {
              "version": "16.18",
              "status": "affected"
            },
            {
              "version": "16.19",
              "status": "affected"
            },
            {
              "version": "16.20",
              "status": "affected"
            },
            {
              "version": "16.21",
              "status": "affected"
            },
            {
              "version": "16.22",
              "status": "affected"
            },
            {
              "version": "16.23",
              "status": "affected"
            },
            {
              "version": "16.24",
              "status": "affected"
            },
            {
              "version": "16.25",
              "status": "affected"
            },
            {
              "version": "16.26",
              "status": "affected"
            },
            {
              "version": "17.0",
              "status": "affected"
            },
            {
              "version": "17.1",
              "status": "affected"
            },
            {
              "version": "17.2",
              "status": "affected"
            },
            {
              "version": "17.3",
              "status": "affected"
            },
            {
              "version": "17.4",
              "status": "affected"
            },
            {
              "version": "17.5",
              "status": "affected"
            },
            {
              "version": "17.6",
              "status": "affected"
            },
            {
              "version": "17.7",
              "status": "affected"
            },
            {
              "version": "17.8",
              "status": "affected"
            },
            {
              "version": "17.9",
              "status": "affected"
            },
            {
              "version": "17.10",
              "status": "affected"
            },
            {
              "version": "17.11",
              "status": "affected"
            },
            {
              "version": "17.12",
              "status": "affected"
            },
            {
              "version": "17.13",
              "status": "affected"
            },
            {
              "version": "17.14",
              "status": "affected"
            },
            {
              "version": "17.15",
              "status": "affected"
            },
            {
              "version": "17.16",
              "status": "affected"
            },
            {
              "version": "17.17",
              "status": "affected"
            },
            {
              "version": "17.18",
              "status": "affected"
            },
            {
              "version": "17.19",
              "status": "affected"
            },
            {
              "version": "17.20",
              "status": "affected"
            },
            {
              "version": "18.0",
              "status": "affected"
            },
            {
              "version": "18.1",
              "status": "affected"
            },
            {
              "version": "18.2",
              "status": "affected"
            },
            {
              "version": "18.3",
              "status": "affected"
            },
            {
              "version": "18.4",
              "status": "affected"
            },
            {
              "version": "18.5",
              "status": "affected"
            },
            {
              "version": "18.6",
              "status": "affected"
            },
            {
              "version": "18.7",
              "status": "affected"
            }
          ]
        }
      ]
    }
  }
}