CVE-2019-15896

2019-09-1015:28:25

mitre

www.cve.org

AI Score

9.7

Confidence

High

EPSS

0.002

Percentile

62.6%

JSON

An issue was discovered in the LifterLMS plugin through 3.34.5 for WordPress. The upload_import function in the class.llms.admin.import.php script is prone to an unauthenticated options import vulnerability that could lead to privilege escalation (administrator account creation), website redirection, and stored XSS.