Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-09999
HistoryFeb 10, 2022 - 12:00 a.m.

WordPress Learning Courses plugin cross-site scripting vulnerability

2022-02-1000:00:00
China National Vulnerability Database
www.cnvd.org.cn
7

0.001 Low

EPSS

Percentile

25.0%

WordPress is a set of blogging platforms developed by the WordPress Foundation using the PHP language. WordPress Learning Courses plugin in versions prior to 5.0 contains a cross-site scripting vulnerability that stems from a lack of data validation filtering of user-supplied data and output. An attacker could exploit this vulnerability to execute JavaScript code on the client side.

CPENameOperatorVersion
wordpress learning courses pluginlt5.0

0.001 Low

EPSS

Percentile

25.0%