cleantalk
Vulnerabilities and Security Researches

LearnPress – WordPress LMS Plugin, 740b8a0e23aff6d2878604ae66184ebee8eab1d5

Published on
Nov 08, 2023
Research Description
LearnPress &#8211; WordPress LMS Plugin for Create and Sell Online Courses [learnpress] < 4.2.5.4 WordPress LearnPress Plugin < 4.2.5.4 is vulnerable to Cross Site Scripting (XSS) Update the WordPress LearnPress plugin to the latest available version (at least 4.2.5.4). Unknown discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress LearnPress Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 4.2.5.4.
Affected versions
max 4.2.5.4.
Status
vulnerable