cleantalk
Vulnerabilities and Security Researches

LearnPress – WordPress LMS Plugin, d82de28b-1f2f-4a51-b3cb-2ff3ceb7c720

Published on
-
Research Description
LearnPress &#8211; WordPress LMS Plugin for Create and Sell Online Courses [learnpress] < 4.1.6.7 LearnPress &lt; 4.1.6.7 - Reflected Cross-Site Scripting The plugin does not escape some URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting
Affected versions
max 4.1.6.7.
Status
vulnerable