LifterLMS – WordPress LMS Plugin for eLearning, CVE-2019-15896
- CVE, Research URL
- Published on
- Sep 10, 2019
- Research Description
- An issue was discovered in the LifterLMS plugin through 3.34.5 for WordPress. The upload_import function in the class.llms.admin.import.php script is prone to an unauthenticated options import vulnerability that could lead to privilege escalation (administrator account creation), website redirection, and stored XSS.
- Affected versions
-
Min -, max 4.21.1.
- Status
-
vulnerable